Q85 — AWS SAA-C03 Ch.13

Question 85 of 100 | ← Chapter 13

Q985. A company is creating an application. The company stores data from tests of the application in multiple on- premises locations.The company needs to connect the on-premises locations to VPCs in an AWS Region in the AWS Cloud.The number of accounts and VPCs willincrease during the next year. The network architecture must simplify the administration of new connections and must provide the ability to scaleWhich solution will meet these requirements with the LEAST administrative overhead?

• A. Create a peering connection between the VPCs. Create a VPN connection between the VPCs and the on-premises locations
• B. Launch an Amazon EC2 instance. On the instance,include VPN software that uses a VPN connection to connect all VPCs and on-premises locations.
• C. Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections. ✓
• D. Create an AWS Direct Connect connection between the on-premises locations and a central VPC.Connect the central VPC to other VPCs by using peering connections.

Correct Answer: C. Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.

Explanation

The correct answer is:C. Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.Explanation:A. Create a peering connection between the VPCs. Create a VPN connection between the VPCs and the on-premises locations.- This solution would not scale well as the number of VPCs and on-premises locations increases, as it would require manually managing multiple peering connections and VPN connections.B. Launch an Amazon EC2 instance. On the instance, include VPN software that uses a VPN connection to connect all VPCs and on-premises locations.- This solution would also not scale well, as it would require managing a single EC2 instance that acts as a VPN concentrator for all the connections.C. Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.- This is the best solution to meet the requirements with the least administrative overhead.- AWS Transit Gateway is a service that acts as a central hub for VPC and on-premises connections, simplifying the network management and making it easier to scale as the number of VPCs and on- premises locations increases.- By creating VPC attachments and VPN attachments to the transit gateway, you can easily connect new VPCs and on-premises locations without having to manage multiple peering connections or VPN concentrators.- The transit gateway automatically handles the routing and connectivity between the attached VPCs and on-premises locations, reducing the administrative overhead.D. Create an AWS Direct Connect connection between the on-premises locations and a central VPC. Connect the central VPC to other VPCs by using peering connections.- This solution would also work, but it would have more administrative overhead than using a transit gateway.- Peering connections between VPCs can still be complex to manage as the number of VPCs increases.- Additionally, the central VPC would become a single point of failure, whereas the transit gateway solution is more resilient.Therefore, the best solution with the least administrative overhead is to create a transit gateway and use VPC attachments and VPN attachments to connect the VPCs and on-premises locations.