Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 215 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 215
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A solutions architect is designing an AWS account structure for a company that consists of multiple teams. All the teams will work in the same AWS Region. The company needs a VPC that is connected to the on-premises network. The company expects less than 50 Mbps of total traffic to and from the on-premises network.

Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)

A. Create an AWS CloudFormation template that provisions a VPC and the required subnets. Deploy the template to each AWS account.
B. Create an AWS CloudFormation template that provisions a VPC and the required subnets. Deploy the template to a shared services account. Share the subnets by using AWS Resource Access Manager.
C. Use AWS Transit Gateway along with an AWS Site-to-Site VPN for connectivity to the on-premises network. Share the transit gateway by using AWS Resource Access Manager.
D. Use AWS Site-to-Site VPN for connectivity to the on-premises network.
E. Use AWS Direct Connect for connectivity to the on-premises network.

Show Suggested Answer

Suggested Answer: BD 🗳️

by emiliocb4 at June 21, 2023, 8:17 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

NikkyDicky

Highly Voted 1 year, 11 months ago

Selected Answer: BD

BD they need a (one) VPC, no need for TGW. Use case for subnet sharing via RAM

upvoted 13 times

LuongTo

6 months, 3 weeks ago

why A out?

upvoted 1 times

KennethYY

6 months ago

because deploy to "each account"

upvoted 1 times

...

8693a49

Most Recent 10 months, 4 weeks ago

Selected Answer: AC

They are designing an account structure. This means multiple accounts, implicitly multiple VPCs. So A will take care of account provisioning. (B is incorrect, subnets cannot be shared). To connect to on-prem, site-to-site VPN is sufficient and most cost-effective, and we also need to give access to it from all accounts, so we need a Transit Gateway. Therefore C is the other correct answer. (D is incorrect because it only works for one VPC, one account, and E is incorrect because is more expensive than VPN and not necessary)

upvoted 2 times

helloworldabc

10 months, 1 week ago

just BD

upvoted 1 times

...

8693a49

10 months, 4 weeks ago

Correction. VPC subnets can be shared, so BC would work, but the resulting architecture is a networking nightmare. I would not do that.

upvoted 2 times

0dc6cac

1 week, 2 days ago

The question says "cost-effective", transit gateways + multiple site-to-site VPNs are not cheap. In most cases, B should be enough, so you only need one site-to-site connection

upvoted 1 times

...

helloworldabc

10 months, 1 week ago

Transit gateways are not cost-effective

upvoted 1 times

...

gfhbox0083

11 months, 2 weeks ago

B, D for sure. No need for a TGW

upvoted 1 times

LuongTo

6 months, 3 weeks ago

why A out?

upvoted 1 times

...

bacharbhouri

1 year, 1 month ago

Selected Answer: BE Why is nobody considering Direct Connect, it is cheaper than Site to Site VPN.

upvoted 1 times

bacharbhouri

1 year, 1 month ago

the ask here is for most cost effectively choice.

upvoted 1 times

...

YOUSSEFSWAID

1 year, 1 month ago

If you have one VPC why you need to share the subnets ?

upvoted 2 times

...

TonytheTiger

1 year, 3 months ago

Selected Answer: BD

Option BC & NOT C - The MOST cost effective option: AWS Site-to-Site VPN connection pricing still applies in addition to AWS Transit Gateway VPN attachment pricing. So you will be additional cost with both option https://aws.amazon.com/transit-gateway/pricing/

upvoted 2 times

...

ftaws

1 year, 5 months ago

The problem did not say how many VPC. @@@

upvoted 2 times

pk0619

6 months ago

there is just one VPC if you select B which makes D the right choice for second answer

upvoted 1 times

...

ayadmawla

1 year, 6 months ago

Selected Answer: BC

B+C in my humble opinion. Reason for C is that this is a design for a company with "multiple teams" so it is only logical that these teams will want to have at some stage independent accounts from one another and different accounts within the same teams. Thinking about a single VPC would be a bit short sighted.

upvoted 3 times

...

career360guru

1 year, 7 months ago

Selected Answer: BD

B and D is right choice.

upvoted 2 times

...

lghoshino78

1 year, 7 months ago

Selected Answer: AD

Most Cost Effective...

upvoted 1 times

...

nublit

1 year, 7 months ago

Selected Answer: AD

You need to create a singe VPC and a single Account.

upvoted 1 times

...

SK_Tyagi

1 year, 10 months ago

Selected Answer: BD

Direct Connect may be an overkill with 1GBPs

upvoted 3 times

...

kebmiockey

1 year, 10 months ago

Other problem with VPN is 1.25 Gb limitation.

upvoted 1 times

...

ggrodskiy

1 year, 11 months ago

Correct AD. I think A is correct because you can connect the VPN to each VPC by using a VPN connection resource in each AWS account. You do not need a shared network account for that. You can refer to this documentation for more details: https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html B is not correct because it will create a single VPC for all the AWS accounts, which will reduce the isolation and security for the different teams. It will also require sharing the subnets by using AWS Resource Access Manager, which will add complexity and overhead.

upvoted 3 times

...