exam questions

Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 32 discussion

Exam question from Amazon's ANS-C00
Question #: 32
Topic #: 1
[All ANS-C00 Questions]

An organization will be expanding its current network design. When fully built out, there will be 99 VPCs spread across 11 AWS accounts (9 VPCs per account).
There is currently an AWS Direct Connect connection into one account with 9 VPCs, each with a virtual network interface (VIF) per VPC.
Which of the following designs will minimize cost while allowing the organization to expand?

  • A. Order 10 new Direct Connect connections, one from each of the accounts that will be provisioned. Create private VIFs in each account. Attach one private VIF per VPC.
  • B. Create a public VIF on the Direct Connect connection. Leverage the public VIF to create a VPN connection to each VPC.
  • C. Create hosted private VIFs in the existing account. Connect a private VIF to an AWS Direct Connect gateway in each account. Connect the gateway in each account to the VPCs.
  • D. Create a transit VPC in the existing account that consists of two routers in separate Availability Zones. Connect each VPC to the two routers in the transit VPC by using VPN.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ScottThomas
Highly Voted 3 years, 8 months ago
Yes Its C
upvoted 15 times
...
sensor
Highly Voted 3 years, 8 months ago
The accent in this question is 'minimize cost' and then 'while allowing the organization to expand' Obviously, with c and d is possible to expand (with d even more - no hard limits) With DX port hour (0.30 per h) and transfer rate 0.20 for each connection With Transit VPC 0.010 in each direction per connection ( see Figure 14.5, official study guide). So, my answer D
upvoted 9 times
...
etarga
Most Recent 2 years, 5 months ago
Selected Answer: D
Correct Answer D
upvoted 1 times
...
PavanKushwah123
2 years, 5 months ago
Correct Answer D
upvoted 1 times
...
joanneli77
2 years, 7 months ago
Obsolete question, if you ask me - since the best option does not actually appear (a Transit Gateway).
upvoted 1 times
...
jerac58653
3 years ago
Selected Answer: D
D because There is a limit of 10 VPCs per DX GW. And with 9 used, there is only 1 VPC room to grow per account. Not sure if this is enough growth for the question. I will assume not.
upvoted 3 times
...
clooudy
3 years, 1 month ago
Selected Answer: C
Answer C DGW is free, AWS don't charge for the data that pass though it. 11 DGWs,11 PVIF and associate each DGW with respective accounts VGWs
upvoted 3 times
...
sapien45
3 years, 3 months ago
Multi-account support for AWS Direct Connect gateway is a feature that allows you to associate up to 10 Amazon Virtual Private Clouds (Amazon VPCs) or up to three AWS Transit Gateways from multiple AWS accounts with an AWS Direct Connect gateway I will go for C
upvoted 2 times
...
Jazz888
3 years, 4 months ago
The only reason I would go for D is because of the phrase "enabling it to grow?" If we choose C there will not be further growth. But in terms of saving and management overhead C would be an attractive answer.
upvoted 1 times
...
AzureDP900
3 years, 4 months ago
I will go with C
upvoted 1 times
...
Cyril_the_Squirl
3 years, 7 months ago
D is Correct.
upvoted 2 times
...
TerrenceC
3 years, 7 months ago
Here is what I thought. Firstly, the question did not mention if inter-VPC communication requires. Secondly, the key component is Direct Connect. For those reasons, it would be much more rational to assume that the organization aims to leverage its existing Direct Connect to expand the communication between on-prem and all the VPCs across the accounts. As a result, option#C seems to be an ideal answer than others.
upvoted 1 times
...
ptpho
3 years, 7 months ago
With D -> We got license fee: 2* ($0.21 to $8.40) + 0.1$ *99 (data to spoken VPC) per hour. We by-pass the encryption fee but need good VPN machines because we have so many connections (AWS VPN max 50). With C -> 1*0.33$ (DCX port h) + 0.02$*11 Both are OK about technical and expandable. So the key is minimize the cost -> I go with C, even D has a clear topo and better for expansion.
upvoted 1 times
...
ChauPhan
3 years, 7 months ago
C is not proper. Connect a private VIF to an AWS Direct Connect gateway in each account. Connect the gateway in each account to the VPCs. You don't need to create each Direct Connect Gateway for each account. Just one account has DX Gateway then connect to all VPCs (even cross-account). Please refer to the link https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-gateways-intro.html If you create each DX Gateway for each account, you also need corresponding number of DX connection
upvoted 3 times
Huy
3 years, 7 months ago
Then you have 99 VGWs connects to central DX GW which is over limits. Limits is 20. So we need 9 DX Gateway for split traffic.
upvoted 1 times
ceros399
3 years, 5 months ago
every account will have it's own DxGateway, the limits are per account, as a single DxGateway can connect 10 VPCs to a single VIF, you'll have all the connections you need.
upvoted 2 times
...
...
...
Pepepep
3 years, 7 months ago
C. I have on DXGW per account (hard limit of 200 DXCW per account) total of 11 DXGW. Virtual Interface per AWS Direct Connect Gateway 30 - hard limit. For this scenario I have 1 VIF per account for a total of 11 VIFs. I can use one VIF with one direct connect gateway to connect up to 10 VPCs. Total: 11 DXGW 11 Private VIFs FAQ Direct Connect Gateway https://aws.amazon.com/directconnect/faqs/ : You can share a private virtual interface to interface with up to ten Virtual Private Clouds (VPCs) to reduce the number of Border Gateway Protocol sessions between your on-premises network and AWS deployments.
upvoted 2 times
...
jason2009
3 years, 7 months ago
Guys, C is obviously not correct. Stop debating. There is a hard limit of 50 VIFs for each DX connection. Cannot be done for 99 VPCs. Impossible. Now the recommended way is a transit gw. but transit VPC achieve the same.
upvoted 4 times
Huntkey
3 years, 7 months ago
Should be C. You just need to create another 8 VIFs, one for each account. Then you will have in total 17 VIFs, way under the limit
upvoted 3 times
...
...
MaikM
3 years, 7 months ago
I will go with D It is presented that way on Udemy course "Clear and Simple AWS Advanced Networking 2020", lecture 89
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...