Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 448 discussion

C is the correct option to mitigate the single point of failure. The Management VPC currently has a single VPN connection through one customer gateway device. This is a single point of failure. Adding a second set of VPN connections from the Management VPC to a second customer gateway device provides redundancy and eliminates this single point of failure.

(production) VPN 1--------------> cgw 1 (management) VPN 2--------------> cgw 2

but what if the VPC peering connection fails? how The Management and Production vpc communicate?

C, (production) --PrivateGateway-------->Direct Connect Gateway 1 ---> cgw 1 ---> DataCenter (production) -- PrivateGateway ------> Direct Connect Gateway 2 --->cgw 2 --> DataCenter (Management) -- > VPN ---- > (Direct Connect Gateway 1?) --- >cgw1 ---> dataCenter---> device in dataCenter

I agree to C

option D is not a valid solution for mitigating single points of failure in the architecture. I apologize for the confusion caused by the incorrect information. To mitigate single points of failure in the architecture, you can consider implementing option C: adding a second set of VPNs to the Management VPC from a second customer gateway device. This will introduce redundancy at the VPN connection level for the Management VPC, ensuring that if one customer gateway or VPN connection fails, the other connection can still provide connectivity to the data center.

Redundant VPN connections: Instead of relying on a single device in the data center, the Management VPC should have redundant VPN connections established through multiple customer gateways. This will ensure high availability and fault tolerance in case one of the VPN connections or customer gateways fails.

https://www.examtopics.com/discussions/amazon/view/53908-exam-aws-certified-solutions-architect-associate-saa-c02/