Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 237 discussion

An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B. Both VPCs are in separate AWS accounts. The network administrator needs to design a solution to configure secure access to EC2 instance in VPC-B from VPC-A. The connectivity should not have a single point of failure or bandwidth concerns.

Which solution will meet these requirements?

  • A. Set up a VPC peering connection between VPC-A and VPC-B.
  • B. Set up VPC gateway endpoints for the EC2 instance running in VPC-B.
  • C. Attach a virtual private gateway to VPC-B and set up routing from VPC-A.
  • D. Create a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-A.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
LuckyAro
Highly Voted 1 year, 5 months ago
Selected Answer: A
AWS uses the existing infrastructure of a VPC to create a VPC peering connection; it is neither a gateway nor a VPN connection, and does not rely on a separate piece of physical hardware. There is no single point of failure for communication or a bandwidth bottleneck. https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html
upvoted 17 times
...
cookieMr
Highly Voted 1 year ago
Selected Answer: A
A VPC peering connection allows secure communication between instances in different VPCs using private IP addresses without the need for internet gateways, VPN connections, or NAT devices. By setting it up, the application running in VPC-A can directly access the EC2 in VPC-B without going through the public internet or any single point of failure. B is incorrect because VPC gateway endpoints are used for accessing S3 or DynamoDB from a VPC without going over the internet. They are not designed for establishing connectivity between EC2 instances in different VPCs. C is incorrect because it would require configuring a VPN connection between the VPCs. This would introduce additional complexity and potential single points of failure. D is incorrect because creating a private VIF and adding routes would be applicable for establishing a direct connection between on-premises infrastructure and VPC-B using Direct Connect, but it is not suitable for the scenario of communication between EC2 instances in separate VPCs within different AWS accounts.
upvoted 9 times
...
Faridtnx
Most Recent 3 months, 3 weeks ago
Selected Answer: A
You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account. Peering within the same AZ is free of charge.
upvoted 1 times
...
lostmagnet001
5 months ago
Selected Answer: A
I get a little confused about B and A but, because, with a VPC endpoint in B it will work too access from A.
upvoted 1 times
...
pentium75
6 months, 1 week ago
Selected Answer: A
B is wrong because "VPC gateway endpoint" is for S3 or DynamoDB, not EC2 C is overkill, would require a second gateway in VPC-A, not be HA and have limited bandwidth D is wrong because VIF is for Direct Connect, has nothing to do with VPC-to-VPC communication
upvoted 3 times
...
Ruffyit
7 months, 2 weeks ago
AWS uses the existing infrastructure of a VPC to create a VPC peering connection; it is neither a gateway nor a VPN connection, and does not rely on a separate piece of physical hardware. There is no single point of failure for communication or a bandwidth bottleneck. https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html
upvoted 1 times
...
Guru4Cloud
9 months, 4 weeks ago
Selected Answer: A
A. Set up a VPC peering connection between VPC-A and VPC-B
upvoted 1 times
...
MNotABot
11 months, 3 weeks ago
https://www.bing.com/search?pglt=41&q=can+we+do+VPC+peering+across+AWS+accounts&cvid=48a8ceecc85a429c9ddd698b01055890&aqs=edge..69i57j0l8j69i11004.10897j0j1&FORM=ANNAB1&PC=LCTS
upvoted 1 times
...
Anmol_1010
1 year ago
D, VPC PEERINGVIS IN SAME ACCOUNT
upvoted 1 times
im6h
1 year ago
No, VPC Peering can use across account. https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html
upvoted 3 times
...
...
omoakin
1 year, 1 month ago
DDDDDDDDDDDDDD
upvoted 2 times
omoakin
1 year, 1 month ago
This is the only viable solution Create a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-A
upvoted 1 times
...
...
michellemeloc
1 year, 1 month ago
Selected Answer: A
"You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account." https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html
upvoted 4 times
...
PDR
1 year, 5 months ago
Selected Answer: A
correct answer is A and as mentioned by JayBee65 below, key reason being that solution should not have a single point of failure and bandwidth restrictions the following paragraph is taken from the AWS docs page linked below that backs this up "AWS uses the existing infrastructure of a VPC to create a VPC peering connection; it is neither a gateway nor a VPN connection, and does not rely on a separate piece of physical hardware. There is no single point of failure for communication or a bandwidth bottleneck." https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html
upvoted 2 times
...
LuckyAro
1 year, 5 months ago
Selected Answer: B
A VPC endpoint gateway to the EC2 Instance is more specific and more secure than forming a VPC peering that exposes the whole of the VPC infrastructure just for one connection.
upvoted 2 times
JayBee65
1 year, 5 months ago
Your logic is correct but security is not a requirement here - the requirements are "The connectivity should not have a single point of failure or bandwidth concerns." A VPC gateway endpoint" would form a single point of failure, so B is incorrect, (and C and D are incorrect for the same reason, they create single points of failure).
upvoted 4 times
...
pentium75
6 months, 1 week ago
B is about a Gateway endpoint, which can be used to connect to S3 or DynamoDB, NOT to another EC2 instance.
upvoted 1 times
...
...
mhmt4438
1 year, 5 months ago
Selected Answer: A
Correct answer is A
upvoted 2 times
...
Aninina
1 year, 5 months ago
Selected Answer: A
VPC peering allows resources in different VPCs to communicate with each other as if they were within the same network. This solution would establish a direct network route between VPC-A and VPC-B, eliminating the need for a single point of failure or bandwidth concerns.
upvoted 1 times
...
waiyiu9981
1 year, 5 months ago
Selected Answer: A
https://www.examtopics.com/discussions/amazon/view/27763-exam-aws-certified-solutions-architect-associate-saa-c02/
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
ex Want to SAVE BIG on Certification Exam Prep?
close
ex Unlock All Exams with ExamTopics Pro 75% Off
  • arrow Choose From 1000+ Exams
  • arrow Access to 10 Exams per Month
  • arrow PDF Format Available
  • arrow Inline Discussions
  • arrow No Captcha/Robot Checks
Limited Time Offer
Ends in