Q22 — AWS SAA-C03 Ch.14
Question 22 of 100 | ← Chapter 14
Q1022. A company needs to design a hybrid network architecture. The company's workloads are currently stored in the AWS Cloud and in on-premises data centers. The workloads require single-digit latencies to communicate. The company uses an AWS Transit Gateway transit gateway to connect multiple VPCs.Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)
- A. Establish an AWS Site-to-Site VPN connection to each VPC.
- B. Associate an AWS Direct Connect gateway with the transit gateway that is attached to the VPCs. ✓
- C. Establish an AWS Site-to-Site VPN connection to an AWS Direct Connect gateway.
- D. Establish an AWS Direct Connect connection. Create a transit virtual interface (VIF) to a Direct Connect gateway. ✓
- E. Associate AWS Site-to-Site VPN connections with the transit gateway that is attached to the VPCs.
Correct Answer: B. Associate an AWS Direct Connect gateway with the transit gateway that is attached to the VPCs., D. Establish an AWS Direct Connect connection. Create a transit virtual interface (VIF) to a Direct Connect gateway.
Explanation
To design a hybrid network architecture that meets the requirement of single-digit latencies for workloads stored in the AWS Cloud and on-premises data centers, and given that the company uses an AWS Transit Gateway to connect multiple VPCs, the most cost-effective steps are:B. Associate an AWS Direct Connect gateway with the transit gateway that is attached to the VPCs.D. Establish an AWS Direct Connect connection. Create a transit virtual interface (VIF) to a Direct Connect gateway.Explanation:\1. Direct Connect Gateway with Transit Gateway (Option B): - Associating a Direct Connect gateway with the Transit Gateway allows for efficient and low-latency communication between on-premises environments and multiple VPCs. This setup is ideal for achieving single-digit latencies because Direct Connect provides a dedicated network connection.\2. Establishing Direct Connect and Transit VIF (Option D): - Setting up an AWS Direct Connect connection and creating a transit virtual interface (VIF) allows you to route traffic between your on-premises data center and AWS services effectively. This setup ensures that the traffic is not only low-latency but also optimized for performance and reliability.Evaluation of Other Options:A. Establish an AWS Site-to-Site VPN connection to each VPC: - While a Site-to-Site VPN can provide connectivity, it typically introduces higher latencies compared to Direct Connect and may not be as cost-effective for multiple VPCs.C. Establish an AWS Site-to-Site VPN connection to an AWS Direct Connect gateway: - This option does not provide a direct route for low-latency communication between the on-premises data center and VPCs, and it still relies on VPN, which can introduce additional latency.E. Associate AWS Site-to-Site VPN connections with the transit gateway that is attached to the VPCs: - Although this option provides a way to connect, it does not achieve the low-latency requirement as effectively as using Direct Connect. Additionally, it may increase costs due to bandwidth charges associated with VPN.Conclusion:The combination of B and D provides the most cost-effective solution for achieving low-latency communication in a hybrid network architecture using AWS Transit Gateway, ensuring efficient and reliable connectivity between on-premises and AWS workloads.