Q17 — AWS SAA-C03 Ch.13

Question 17 of 100 | ← Chapter 13

Q917. A company is migrating five on-premises applications to VPCs in the AWS Cloud. Each application is currently deployed in isolated virtual networks on premises and should be deployed similarly in the AWS Cloud. The applications need to reach a shared services VPC. All the applications must be able to communicate with each other.If the migration is successful, the company will repeat the migration process for more than 100 applications.Which solution will meet these requirements with the LEAST administrative overhead?

Correct Answer: D. Deploy a transit gateway with associations between the transit gateway and the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets and the application VPCs to the shared services VPC through the transit gateway.

Explanation

To meet the company's requirements of migrating multiple applications to VPCs in the AWS Cloud with the least administrative overhead, the most suitable solution is:D. Deploy a transit gateway with associations between the transit gateway and the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets and the application VPCs to the shared services VPC through the transit gateway.A transit gateway simplifies network connectivity and routing between multiple VPCs and on-premises networks. It acts as a hub that allows for centralized management and reduces administrative overhead.By deploying a transit gateway and establishing associations between the transit gateway and the application VPCs as well as the shared services VPC, the company can create a scalable and efficient network architecture. This solution enables transparent communication between the application VPCs, including the ability to reach the shared services VPC.Adding routes between the application VPCs in their subnets and the transit gateway allows for proper routing of traffic between the VPCs and the shared services VPC. This ensures that all applications can communicate with each other and access the shared services VPC without requiring complex VPN tunnels or direct connections.Option A suggests deploying software VPN tunnels between the application VPCs and the shared services VPC. While this solution may work for a small number of applications, it becomes administratively burdensome and difficult to manage as the number of applications increases.Option B suggests deploying VPC peering connections between the application VPCs and the shared services VPC. While VPC peering can provide connectivity between VPCs, it requires setting up and managing individual peering connections for each VPC, resulting in increased administrative overhead.Option C suggests deploying an AWS Direct Connect connection between the application VPCs and the shared services VPC. Direct Connect is typically used for establishing dedicated connections to on-premises networks and may not be the most efficient or scalable solution for interconnecting multiple VPCs.In summary, option D, deploying a transit gateway with associations and adding routes between the application VPCs and the shared services VPC, provides the most efficient and least administratively burdensome solution for migrating and connecting multiple applications in VPCs while ensuring communication between them and the shared services VPC.