Which AWS service allows you to create a secure, private connection between your AWS VPC and on-premises sites using an IPSec tunnel over the internet with centralized management via a Hub-and-Spoke model?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Transit Gateway with VPN attachments

Transit Gateway simplifies the management of multiple VPN connections and VPCs by acting as a central networking hub....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

Which AWS service allows you to create a secure, private connection between your AWS VPC and on-premises sites using an IPSec tunnel over the internet with centralized management via a Hub-and-Spoke model?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

AWS Transit Gateway with VPN attachments

Why This Answer Is Correct

Transit Gateway simplifies the management of multiple VPN connections and VPCs by acting as a central networking hub.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.