Q55 — AWS SAA-C03 Ch.13

Question 55 of 100 | ← Chapter 13

Q955. A company hosts its core network services,including directory services and DNS, in its on-premises data center.The data center is connected to the AWS Cloud using AWS Direct Connect(DX).Additional AWS accounts are planned that will require quick,cost-effective,and consistent access to these network services.What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?

• A. Create a DX connection in each new account. Route the network traffic to the on-premises servers.
• B. Configure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on- premises servers.
• C. Create a VPN connection between each new account and the DX VPC.Route the network traffic to the on-premises servers.
• D. Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers. ✓

Correct Answer: D. Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.

Explanation

The best solution to meet the requirements with the LEAST amount of operational overhead is D. Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.Here's why:Centralized Connectivity: Transit Gateway acts as a central hub for connecting multiple VPCs and on- premises networks. This eliminates the need for individual connections between each new account and the on-premises data center.Simplified Management: Managing a single Transit Gateway is significantly easier than managing multiple DX connections, VPN connections, or VPC endpoints.Cost-Effective: Transit Gateway typically offers a more cost-effective solution compared to individual DX connections or VPN connections, especially as the number of accounts grows. Consistent Access: Transit Gateway ensures consistent and reliable access to the on-premises network services for all connected accounts.Why other options are less efficient:A. Create a DX connection in each new account. Route the network traffic to the on-premises servers: This approach requires creating and managing a separate DX connection for each new account, increasing operational overhead and cost.B. Configure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on- premises servers: VPC endpoints are designed for accessing AWS services, not for connecting to on- premises networks. They might not be suitable for routing traffic to directory services and DNS. C. Create a VPN connection between each new account and the DX VPC. Route the network traffic to the on-premises servers: While VPN connections can provide connectivity, they can be less reliable and more complex to manage than Transit Gateway.In summary:Option D provides the most efficient and scalable solution for connecting multiple AWS accounts to the on- premises data center. Transit Gateway simplifies management, reduces operational overhead, and ensures consistent and cost-effective access to the core network services.