Q72 — AWS SAA-C03 Ch.17

Question 72 of 89 | ← Chapter 17

Q1372. A company wants to use AWS Direct Connect to connect the company's on-premises networks to the AWS Cloud. The company runs several VPCs in a single AWS Region. The company plans to expand its VPC fleet to include hundreds of VPCs.A solutions architect needs to simplify and scale the company's network infrastructure to accommodate future VPCs.Which service or resource will meet these requirements?

Correct Answer: B. AWS Transit Gateway

Explanation

Let's analyze each option to determine which one meets the requirement of simplifying and scaling the company's network infrastructure to accommodate hundreds of VPCs while using AWS Direct Connect to connect on - premises networks to the AWS Cloud:Option A: VPC endpointsVPC endpoints enable private connections between a VPC and other AWS services without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. They are used to access specific AWS services from within a VPC in a secure way. However, VPC endpoints do not help in simplifying and scaling the connection between on - premises networks and multiple VPCs. Their main purpose is to provide access to AWS services within a VPC, not to manage the inter - VPC and on - premises connectivity at scale. So, this option is incorrect.Option B: AWS Transit GatewayAWS Transit Gateway acts as a hub that simplifies network topology in the AWS Cloud. It allows you to connect multiple VPCs and on - premises networks through a single gateway. Instead of having to create and manage multiple peer - to - peer connections (VPC peering) between VPCs and between on - premises networks and each VPC, you can use AWS Transit Gateway.When the company plans to expand its VPC fleet to hundreds of VPCs, using AWS Transit Gateway eliminates the complexity of managing a large number of individual connections. It provides a centralized way to route traffic between VPCs and on - premises networks via AWS Direct Connect. This makes it an ideal solution for simplifying and scaling the network infrastructure as required. So, this option is correct.Option C: Amazon Route 53Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. It is used for domain registration, DNS routing, and health checking of resources. While it plays a crucial role in directing traffic to the appropriate endpoints in the AWS environment, it has nothing to do with simplifying and scaling the physical network connections between on - premises networks and multiple VPCs. Its focus is on DNS - based traffic management, not network connectivity architecture. So, this option is incorrect.Option D: AWS Secrets ManagerAWS Secrets Manager is a service that helps you protect access to your applications, services, and IT resources without the upfront investment and on - going maintenance costs of operating your own infrastructure. It is used to store and manage secrets such as database credentials, API keys, etc. It has no relation to network infrastructure management, connecting on - premises networks to VPCs, or scaling the network to accommodate multiple VPCs. So, this option is incorrect.Therefore, the service that will meet the requirements is AWS Transit Gateway, and the answer is B.