Exam AWS Certified Solutions Architect - Professional topic 1 question 811 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 811
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

A company is building an application on AWS. The application sends logs to an Amazon Elasticsearch Service (Amazon ES) cluster for analysis. All data must be stored within a VPC.
Some of the company's developers work from home. Other developers work from three different company office locations. The developers need to access
Amazon ES to analyze and visualize logs directly from their local development machines.
Which solution will meet these requirements?

A. Configure and set up an AWS Client VPN endpoint. Associate the Client VPN endpoint with a subnet in the VPC. Configure a Client VPN self-service portal. Instruct the developers to connect by using the client for Client VPN.
B. Create a transit gateway, and connect it to the VPC. Create an AWS Site-to-Site VPN. Create an attachment to the transit gateway. Instruct the developers to connect by using an OpenVPN client.
C. Create a transit gateway, and connect it to the VPC. Order an AWS Direct Connect connection. Set up a public VIF on the Direct Connect connection. Associate the public VIF with the transit gateway. Instruct the developers to connect to the Direct Connect connection
D. Create and configure a bastion host in a public subnet of the VPC. Configure the bastion host security group to allow SSH access from the company CIDR ranges. Instruct the developers to connect by using SSH.

Show Suggested Answer

Suggested Answer: A 🗳️

by Smartphone at Jan. 5, 2022, 5:32 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

asfsdfsdf

2 years, 4 months ago

Selected Answer: A

Only A will work if users are working from home

upvoted 3 times

...

tkanmani76

2 years, 10 months ago

A - https://aws.amazon.com/premiumsupport/knowledge-center/client-vpn-associate-target-network/

upvoted 4 times

...

wahlbergusa

2 years, 10 months ago

Selected Answer: A

B - It is either On prem - TGW - VPC attachment OR On prem - VPN - VPC attachment. Would not make sense to do both in this scenario. Redundancy is not the focus here. Plus OpenVPN client will be used as a client to site solution by developers. Hence this option is WRONG. C - ElasticSearch is not a public service. Hence Public VIF will not help here. D - ElasticSearch is GUI based so SSH will not help here. Option A satisfies the criterias.

upvoted 4 times

wahlbergusa

2 years, 10 months ago

A slight correction on Option C. ElasticSearch actually is a public service. My vote is still on A since ordering a direct connect is certainly an overkill for this scenario.

upvoted 2 times

...

Smartphone

2 years, 11 months ago

A is the correct Answer.

upvoted 1 times

...