exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 822 discussion

A company is migrating some of its applications to AWS. The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies. The company has set up an AWS Direct Connection connection in a central network account.
The company expects to have hundreds of AWS accounts and VPCs in the near future. The corporate network must be able to access the resources on AWS seamlessly and also must be able to communicate with all the VPCs. The company also wants to route its cloud resources to the internet through its on-premises data center.
Which combination of steps will meet these requirements? (Choose three.)

  • A. Create a Direct Connect gateway in the central account. In each of the accounts, create an association proposal by using the Direct Connect gateway and the account ID for every virtual private gateway.
  • B. Create a Direct Connect gateway and a transit gateway in the central network account. Attach the transit gateway to the Direct Connect gateway by using a transit VIF.
  • C. Provision an internet gateway. Attach the internet gateway to subnets. Allow internet traffic through the gateway.
  • D. Share the transit gateway with other accounts. Attach VPCs to the transit gateway.
  • E. Provision VPC peering as necessary.
  • F. Provision only private subnets. Open the necessary route on the transit gateway and customer gateway to allow outbound internet traffic from AWS to flow through NAT services that run in the data center.
Show Suggested Answer Hide Answer
Suggested Answer: BDF 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
guruaws2021
Highly Voted 2 years, 11 months ago
It should be BDF
upvoted 14 times
...
SkyZeroZx
Most Recent 1 year, 5 months ago
Selected Answer: BDF
same question in version 2 https://www.examtopics.com/discussions/amazon/view/95532-exam-aws-certified-solutions-architect-professional-sap-c02/
upvoted 2 times
...
Jesuisleon
1 year, 6 months ago
A is wrong because Direct connect gateway can ONLY support 10 VGWs(virtual private gateway) or 10 VPCs and the question says "The company expects to have hundreds of AWS accounts and VPCs in the near future"
upvoted 1 times
...
SIX
1 year, 7 months ago
I think the right answer is B,C,D. Option F is incorrect because the requirement is to route cloud resources to the internet through the on-premises data center, which requires outbound internet traffic from AWS to flow through NAT services that run in the data center. However, the option suggests opening a necessary route on the Transit Gateway and customer gateway to allow outbound internet traffic from AWS to flow through NAT services, which is not feasible as Transit Gateway does not support NAT.
upvoted 1 times
...
gnic
2 years, 3 months ago
Selected Answer: BDF
BDF, with TG you don't need peering
upvoted 1 times
...
asfsdfsdf
2 years, 4 months ago
Selected Answer: BDF
BDF - is the correct architecture to use with TGW + DX
upvoted 1 times
...
arberod
2 years, 9 months ago
Selected Answer: BDF
bdf should be
upvoted 3 times
...
lavy
2 years, 10 months ago
Peering is not needed for transit GW, i agree with BDF
upvoted 3 times
user0001
2 years, 7 months ago
it is not scalable , that is the reason it is wrong
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago