Correct Answer: AWS Site-to-Site VPN with a Transit Gateway
Site-to-Site VPN (especially when combined with Transit Gateway) supports BGP for dynamic routing, providing a flexible and resilient hybrid connectivity solution....
Correct Answer
AWS Site-to-Site VPN with a Transit Gateway
Why This Answer Is Correct
Site-to-Site VPN (especially when combined with Transit Gateway) supports BGP for dynamic routing, providing a flexible and resilient hybrid connectivity solution.
This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your company has multiple VPCs across different regions and accounts. You need to enable a high-performance, many-to-many connectivity model while ensuring that you can centrally manage the routing and security between these VPCs and your on-premises data center via a 10 Gbps Direct Connect. What is the recommended architecture?
A SaaS provider wants to offer their customers a way to privately access their backend API services hosted on AWS without using public IPs, VPNs, or VPC Peering. Which AWS feature enables this cross-account private connectivity?
An organization wants to implement 'Zero Trust' networking for its developers to access internal admin panels hosted on EC2. They want to avoid a traditional VPN and instead use identity-based access with MFA. Which AWS service is best?
Which AWS networking feature allows you to physically connect your on-premises routers to an AWS edge location for a private, consistent experience, bypassing the public internet?
To reduce the network latency for users in remote locations without deploying full infrastructure in those regions, which AWS service provides a global network of edge locations to terminate user TCP/UDP connections closer to them?