Your company has multiple VPCs across different regions and accounts. You need to enable a high-performance, many-to-many connectivity model while ensuring that you can centrally manage the routing and security between these VPCs and your on-premises data center via a 10 Gbps Direct Connect. What is the recommended architecture?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Transit Gateway with a Transit Gateway peering and Direct Connect Gateway

AWS Transit Gateway acts as a hub, simplifying cross-account and cross-regional connectivity. Combining it with a Direct Connect Gateway allows you to share a single DX connection ...

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

Your company has multiple VPCs across different regions and accounts. You need to enable a high-performance, many-to-many connectivity model while ensuring that you can centrally manage the routing and security between these VPCs and your on-premises data center via a 10 Gbps Direct Connect. What is the recommended architecture?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

AWS Transit Gateway with a Transit Gateway peering and Direct Connect Gateway

Why This Answer Is Correct

AWS Transit Gateway acts as a hub, simplifying cross-account and cross-regional connectivity. Combining it with a Direct Connect Gateway allows you to share a single DX connection across multiple VPCs and regions.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All AWS Certified Solutions Architect – Professional (SAP-C02) Questions →Browse All AWS Exams →

More Amazon VPC Practice Questions

A SaaS provider wants to offer their customers a way to privately access their backend API services hosted on AWS without using public IPs, VPNs, or VPC Peering. Which AWS feature enables this cross-account private connectivity?

An organization wants to implement 'Zero Trust' networking for its developers to access internal admin panels hosted on EC2. They want to avoid a traditional VPN and instead use identity-based access with MFA. Which AWS service is best?

Which AWS networking feature allows you to physically connect your on-premises routers to an AWS edge location for a private, consistent experience, bypassing the public internet?

To reduce the network latency for users in remote locations without deploying full infrastructure in those regions, which AWS service provides a global network of edge locations to terminate user TCP/UDP connections closer to them?

An organization wants to analyze the network traffic across all their VPCs to identify unusual patterns or security threats. They need to see details like source/destination IP, ports, and protocols. What should they enable?

← Back to AWS Certified Solutions Architect – Professional (SAP-C02) Full Practice Hub