AWS Certified Advanced Networking - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company operates its AWS environment in a single AWS Region, comprising several hundred application VPCs, a shared services VPC, and a VPN connection to its on-premises network. A network engineer must configure a transit gateway with the following requirements:
• Application VPCs must remain isolated from each other.
• Bidirectional communication must be enabled between the application VPCs and the on-premises network.
• Bidirectional communication must be enabled between the application VPCs and the shared services VPC.
The network engineer has set up the transit gateway with default route table association and propagation disabled. They have also created the VPN attachment for the on-premises network and VPC attachments for the application VPCs and shared services VPC.
To meet all requirements with the fewest transit gateway route tables, which two actions should the network engineer take? (Choose two.)
A
Configure a separate transit gateway route table for on premises. Associate the VPN attachment with this transit gateway route table. Propagate all application VPC attachments to this transit gateway route table.
B
Configure a separate transit gateway route table for each application VPC. Associate each application VPC attachment with its respective transit gateway route table. Propagate the shared services VPC attachment and the VPN attachment to this transit gateway route table.
C
Configure a separate transit gateway route table for all application VPCs. Associate all application VPCs with this transit gateway route table. Propagate the shared services VPC attachment and the VPN attachment to this transit gateway route table.
D
Configure a separate transit gateway route table for the shared services VPC. Associate the shared services VPC attachment with this transit gateway route table. Propagate all application VPC attachments to this transit gateway route table.
E
Configure a separate transit gateway route table for on premises and the shared services VPC. Associate the VPN attachment and the shared services VPC attachment with this transit gateway route table. Propagate all application VPC attachments to this transit gateway route table.