Amazon Exam ANS-C01 Topic 7 Question 30 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 30
Topic #: 7

A company has established connectivity between its on-premises data center in Paris, France, and the AWS Cloud by using an AWS Direct Connect connection. The company uses a transit VIF that connects the Direct Connect connection with a transit gateway that is hosted in the Europe (Paris) Region. The company hosts workloads in private subnets in several VPCs that are attached to the transit gateway.

The company recently acquired another corporation that hosts workloads on premises in an office building in Tokyo, Japan. The company needs to migrate the workloads from the Tokyo office to AWS. These workloads must have access to the company's existing workloads in Paris. The company also must establish connectivity between the Tokyo office building and the Paris data center.

In the Asia Pacific (Tokyo) Region, the company creates a new VPC with private subnets for migration of the workloads. The workload migration must be completed in 5 days. The workloads cannot be directly accessible from the internet.

Which set of steps should a network engineer take to meet these requirements?

A1. Create public subnets in the Tokyo VPC to migrate the workloads into.
2. Configure an internet gateway for the Tokyo office to reach the Tokyo VPC.
3. Configure security groups on the Tokyo workloads to only allow traffic from the Tokyo office and the Paris workloads.
4. Create peering connections between the Tokyo VPC and the Paris VPCs.
5. Configure a VPN connection between the Paris data center and the Tokyo office by using existing routers.

B1. Configure a transit gateway in the Asia Pacific (Tokyo) Region. Associate this transit gateway with the Tokyo VPC.
2. Create peering connections between the Tokyo transit gateway and the Paris transit gateway.
3. Set up a new Direct Connect connection from the Tokyo office to the Tokyo transit gateway.
4. Configure routing on both transit gateways to allow data to flow between sites and the VPCs.

C1. Configure a transit gateway in the Asia Pacific (Tokyo) Region. Associate this transit gateway with the Tokyo VPC.
2. Create peering connections between the Tokyo transit gateway and the Paris transit gateway.
3. Configure an AWS Site-to-Site VPN connection from the Tokyo office. Set the Tokyo transit gateway as the target.
4. Configure routing on both transit gateways to allow data to flow between sites and the VPCs.

D1. Configure an AWS Site-to-Site VPN connection from the Tokyo office to the Paris transit gateway.
2. Create an association between the Paris transit gateway and the Tokyo VPC.
3. Configure routing on the Paris transit gateway to allow data to flow between sites and the VPCs.

Show Suggested Answer

Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.

by Estrella at Jun 29, 2024, 08:14 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bronwyn

28 days ago

I'm surprised option A even made it onto the list. Peering between VPCs? What is this, the Stone Age? Option B is the future, my friends.

upvoted 0 times

...

1 months ago

Option C is also a viable solution, but it requires an additional VPN connection from the Tokyo office, which could add some complexity. I think option B is the way to go.

upvoted 0 times

Nettie

13 days ago

Yeah, setting up a transit gateway in Tokyo and connecting it to the Paris transit gateway sounds like the best approach.

upvoted 0 times

...

Bobbye

23 days ago

I agree, option B seems like the most straightforward solution.

upvoted 0 times

...

Geraldine

1 months ago

I'm not sure, I think option C could also work. Setting up an AWS Site-to-Site VPN connection from the Tokyo office might be a good alternative.

upvoted 0 times

...

Wendell

1 months ago

I agree with Amos. Option B seems to be the most efficient way to establish connectivity between the Tokyo office and the Paris data center.

upvoted 0 times

...

2 months ago

The steps provided in option B seem to be the most comprehensive and straightforward approach to meeting the requirements. Establishing a direct connection from the Tokyo office to the Tokyo transit gateway is a smart move.

upvoted 0 times