Answer-first summary for fast verification
Answer: Create one Virtual Private Cloud (VPC) network per environment. Create one additional VPC for the entry point to the cloud network. Peer the entry point VPC with the environment VPCs.
Option D is the correct choice because it fully addresses all requirements: it creates separate VPCs for development and production environments to ensure complete network isolation (no traffic between them), and it establishes a dedicated entry point VPC that peers with both environment VPCs, providing a single centralized entry from on-premises. This design prevents direct peering between development and production VPCs, eliminating inter-environment traffic while maintaining the required centralized access. Option A fails because peering environment VPCs directly could allow traffic between them. Option B uses shared VPC with subnets, which doesn't provide complete isolation as subnets within the same VPC can potentially communicate. Option C uses VPC Service Controls, which primarily focuses on data access security rather than network-level isolation and doesn't address the centralized entry point requirement effectively.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
You are designing a secure network architecture that requires complete isolation between development and production environments, with no network traffic permitted between them. The network team has mandated a single, centralized entry point from the on-premises environment into the cloud network. What should you do?
A
Create one Virtual Private Cloud (VPC) network per environment. Add the on-premises entry point to the production VPC. Peer the VPCs with each other and create firewall rules to prevent traffic.
B
Create one shared Virtual Private Cloud (VPC) network and use it as the entry point to the cloud network. Create separate subnets per environment. Create firewall rules to prevent traffic.
C
Create one Virtual Private Cloud (VPC) network per environment. Create a VPC Service Controls perimeter per environment and add one environment VPC to each.
D
Create one Virtual Private Cloud (VPC) network per environment. Create one additional VPC for the entry point to the cloud network. Peer the entry point VPC with the environment VPCs.