SAP-C02 Exam - Question 430

Question

A company provides a centralized Amazon EC2 application hosted in a single shared VPC. The centralized application must be accessible from client applications running in the VPCs of other business units. The centralized application front end is configured with a Network Load Balancer (NLB) for scalability.

Up to 10 business unit VPCs will need to be connected to the shared VPC. Some of the business unit VPC CIDR blocks overlap with the shared VPC, and some overlap with each other Network connectivity to the centralized application in the shared VPC should be allowed from authorized business unit VPCs only.

Which network configuration should a solutions architect use to provide connectivity from the client applications in the business unit VPCs to the centralized application in the shared VPC?

Examice · Accepted Answer

To provide connectivity from client applications in the business unit VPCs to the centralized application in the shared VPC, especially when the CIDR blocks of the VPCs overlap, the best solution is to create a VPC endpoint service using the centralized application NLB and enable the option to require endpoint acceptance. Then, create a VPC endpoint in each of the business unit VPCs using the service name of the endpoint service, and accept authorized endpoint requests from the endpoint service console. This configuration allows for secure and controlled access to the centralized application despite the overlapping IP addresses.

sat2008 · Answer

B is the answer for me 
Only way to get around overlapping IP range is using endpoint service

alexis123456 · Answer

Correct Answer is A

kejam · Answer

https://www.examtopics.com/discussions/amazon/view/46708-exam-aws-certified-solutions-architect-professional-topic-1/

https://aws.amazon.com/blogs/networking-and-content-delivery/connecting-networks-with-overlapping-ip-ranges/

HunkyBunky · Answer

Answer is B
Application already uses NLB so this is a best way for solve that task

arberod · Answer

B is the answer

master9 · Answer

VPC Endpoint Service can do the job

career360guru · Answer

option B

43c89f4 · Answer

A is actually. they never mentioned cost effect or less effort solution.

when they are not mentioned anything we need to prefer best option

Moghite · Answer

only option to get around of IP overlapping 
https://aws.amazon.com/blogs/networking-and-content-delivery/connecting-networks-with-overlapping-ip-ranges/

SAP-C02 Exam - Question 430

Discussion