ANS-C01 Question 347
Select 2Your organization has a hybrid network setup with on-premises data centers connected to AWS through AWS Direct Connect. You need to connect multiple VPCs across different AWS Regions to your on-premises network using a single Direct Connect connection. Additionally, you want to ensure that the solution allows for efficient routing management and minimizes configuration complexity. Which combination of connectivity methods will best meet these requirements?
- A
Use a Direct Connect gateway to connect the Direct Connect connection to multiple VPCs across regions.
- B
Establish individual Virtual Private Gateways (VGWs) for each VPC and connect them to your on-premises network.
- C
Use AWS Transit Gateway to connect the VPCs and attach the Transit Gateway to the Direct Connect gateway.
- D
Create separate Direct Connect connections for each AWS Region to connect to the VPCs.
- E
Configure VPN connections for each VPC to connect to the on-premises network instead of using Direct Connect.
Show answer and explanation
Correct answers: A, C
Explanation
The best solution for connecting multiple VPCs across regions to an on-premises network using a single Direct Connect connection is to use a combination of Direct Connect gateway and AWS Transit Gateway. The Direct Connect gateway enables inter-region connectivity over a single Direct Connect connection, while the Transit Gateway allows for efficient routing and simplifies the architecture by connecting multiple VPCs in a hub-and-spoke model. This approach minimizes configuration complexity and ensures optimal performance.
- A. Correct.
Using a Direct Connect gateway allows you to use a single Direct Connect connection to connect to multiple VPCs across different AWS Regions, simplifying the connectivity architecture.
- B. Incorrect.
Establishing individual VGWs for each VPC increases complexity and does not utilize the full capabilities of a Direct Connect gateway, making it an inefficient solution for this scenario.
- C. Correct.
Using AWS Transit Gateway in combination with a Direct Connect gateway simplifies routing and connectivity by consolidating VPCs into a hub-and-spoke model, which can then be connected to the Direct Connect gateway.
- D. Incorrect.
Creating separate Direct Connect connections for each region increases costs and complexity and is unnecessary when a Direct Connect gateway can handle inter-region connectivity.
- E. Incorrect.
VPN connections are a less optimal solution compared to Direct Connect in terms of performance, reliability, and cost, especially when a Direct Connect connection is already available.