exam questions

Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 51 discussion

Exam question from Amazon's ANS-C00
Question #: 51
Topic #: 1
[All ANS-C00 Questions]

A customer has set up multiple VPCs for Dev, Test, Prod, and Management. You need to set up AWS Direct Connect to enable data flow from on-premises to each VPC. The customer has monitoring software running in the Management VPC that collects metrics from the instances in all the other VPCs. Due to budget requirements, data transfer charges should be kept at minimum.
Which design should be recommended?

  • A. Create a total of four private VIFs, one for each VPC owned by the customer, and route traffic between VPCs using the Direct Connect link.
  • B. Create a private VIF to the Management VPC, and peer this VPC to all other VPCs.
  • C. Create a private VIF to the Management VPC, and peer this VPC to all other VPCs; enable source/destination NAT in the Management VPC.
  • D. Create a total of four private VIFs, and enable VPC peering between all VPCs.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
walkwolf3
Highly Voted 3 years, 8 months ago
D Private virtual interface should not be transitive.
upvoted 5 times
...
etarga
Most Recent 2 years, 5 months ago
Selected Answer: D
Correct Answer D
upvoted 1 times
...
kapara
2 years, 9 months ago
Selected Answer: D
The solution needs to allow traffic to Management from other VPCs, and from each VPC to on-prem. B and C are out, because VPC is not transitive, NAT or no NAT, so all the other VPCs wouldn't have on-prem connectivity. A and D could both work, but with A the traffic from VPCs to management VPC would have to be routed through on-prem router (dx doesnt allow direct transfer of data between connected VPCs). In this case it would go on the DX and incur DTO costs. In D this traffic can go over peering connection. I'm going with D.
upvoted 1 times
...
2shyshy
3 years, 4 months ago
A is the answer because it says data transfer from on premise to each VPC, its not specifying that data transfer between VPC peers are allowed should happen.
upvoted 1 times
...
JohnnyBG
3 years, 5 months ago
Selected Answer: D
Private virtual interface should not be transitive.
upvoted 3 times
...
ceros399
3 years, 5 months ago
Selected Answer: C
C; on-premises needs communication to all VPNs, keeping cost low. so having only 1 VIF for all VPCs will do the thing. A is not feasible because will incur in high data transfer charges because traffic with management win flow through the mng vpc.
upvoted 1 times
...
1234567J
3 years, 7 months ago
i think its B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...