Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon ANS-C01 Exam - Topic 1 Question 45 Discussion

A company has an AWS account with four VPCs in the us-east-1 Region. The VPCs consist of a development VPC and three production VPCs that host various workloads.The company has extended its on-premises data center to AWS with AWS Direct Connect by using a Direct Connect gateway. The company now wants to establish connectivity to its production VPCs and development VPC from on premises. The production VPCs are allowed to route data to each other. However, the development VPC must be isolated from the production VPCs. No data can flow between the development VPC and the production VPCs.In preparation to implement this solution, a network engineer creates a transit gateway with a single transit gateway route table. Default route table association and default route table propagation are turned off. The network engineer attaches the production VPCs. the development VPC. and the Direct Connect gateway to the transit gateway. For each VPC route table, the network engineer adds a route to 0.0.0.0/0 with the transit gateway as the next destination.Which combination of steps should the network engineer take next to complete this solution? (Select THREE.)
A) Associate the production VPC attachments with the existing transit gateway route table. Propagate the routes from these attachments. and C) Associate the Direct Connect gateway attachment with the existing transit gateway route table. Propagate the Direct Connect gateway attachment to this route table. and D) Change the security group inbound rules on the existing transit gateway network interfaces in the development VPC to allow connections to and from the on-premises CIDR range only.
B) Associate all the attachments with the existing transit gateway route table. Propagate the routes from these attachments.
E) Create a new transit gateway route table. Associate the new route table with the development VPC attachment. Propagate the Direct Connect gateway and development VPC attachment to the new route table.
F) Create a new transit gateway with default route table association and default route table propagation turned on. Attach the Direct Connect gateway and development VPC to the new transit gateway.

Amazon ANS-C01 Exam - Topic 1 Question 45 Discussion

Actual exam question for Amazon's ANS-C01 exam
Question #: 45
Topic #: 1
[All ANS-C01 Questions]

A company has an AWS account with four VPCs in the us-east-1 Region. The VPCs consist of a development VPC and three production VPCs that host various workloads.

The company has extended its on-premises data center to AWS with AWS Direct Connect by using a Direct Connect gateway. The company now wants to establish connectivity to its production VPCs and development VPC from on premises. The production VPCs are allowed to route data to each other. However, the development VPC must be isolated from the production VPCs. No data can flow between the development VPC and the production VPCs.

In preparation to implement this solution, a network engineer creates a transit gateway with a single transit gateway route table. Default route table association and default route table propagation are turned off. The network engineer attaches the production VPCs. the development VPC. and the Direct Connect gateway to the transit gateway. For each VPC route table, the network engineer adds a route to 0.0.0.0/0 with the transit gateway as the next destination.

Which combination of steps should the network engineer take next to complete this solution? (Select THREE.)

Show Suggested Answer Hide Answer
Suggested Answer: A, C, D

by Jaclyn at Jan 24, 2025, 08:21 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Evangelina
9 months ago
B is definitely the way to go for the production VPCs!
upvoted 0 times
...
Bette
9 months ago
Wait, why would we create a new transit gateway? Seems unnecessary.
upvoted 0 times
...
Shaquana
10 months ago
I think option E makes the most sense for the development VPC.
upvoted 0 times
...
Penney
10 months ago
Totally agree, isolation is key here!
upvoted 0 times
...
Lenna
10 months ago
The development VPC needs to be isolated from production.
upvoted 0 times
...
Remedios
10 months ago
I’m a bit confused about the security groups; I think option D might be necessary to restrict access, but I’m not certain if it’s one of the required steps.
upvoted 0 times
...
Lacresha
11 months ago
I practiced a similar question where we had to manage route propagation, and I feel like option A could be the right choice for the production VPCs.
upvoted 0 times
...
Janna
11 months ago
I’m not entirely sure, but I think option E sounds right because it talks about creating a new route table specifically for the development VPC.
upvoted 0 times
...
Olive
11 months ago
I remember that we need to ensure the development VPC is isolated, so I think we shouldn't propagate routes from it to the production VPCs.
upvoted 0 times
...
Terrilyn
11 months ago
I'm not sure about the security group part. Do I really need to change the inbound rules on the transit gateway network interfaces? That seems like an extra step that might not be necessary.
upvoted 0 times
...
Johnson
11 months ago
This seems straightforward enough. I'll just associate all the attachments with the existing transit gateway route table and propagate the routes. That should give me the connectivity I need.
upvoted 0 times
...
Velda
11 months ago
Okay, I think I've got this. The key is to create a new transit gateway route table for the development VPC, and then propagate the Direct Connect gateway and development VPC attachments to that route table. That should do the trick.
upvoted 0 times
...
Aileen
11 months ago
Hmm, I'm a bit confused by all the different VPCs and route tables. I'll need to really focus on understanding the network topology and the specific requirements before I can start solving this.
upvoted 0 times
...
Lisbeth
11 months ago
This looks like a tricky question, but I think I have a good strategy. I'll need to carefully read through the requirements and think about how to isolate the development VPC while still allowing connectivity to the production VPCs.
upvoted 0 times
...
William
2 years ago
I also believe we should associate all the attachments with the existing transit gateway route table and propagate the routes.
upvoted 0 times
...
Mel
2 years ago
Yes, that sounds like a good idea. We need to ensure the production VPCs can communicate with each other.
upvoted 0 times
...
Suzi
2 years ago
I think we should associate the production VPC attachments with the existing transit gateway route table and propagate the routes.
upvoted 0 times
...
Johanna
2 years ago
I'm just here for the free snacks, but if you're asking, I'd say A, C, and E sound like the way to go.
upvoted 0 times
Mel
1 year ago
E) Create a new transit gateway route table. Associate the new route table with the development VPC attachment. Propagate the Direct Connect gateway and development VPC attachment to the new route table.
upvoted 0 times
...
Rosendo
1 year ago
C) Associate the Direct Connect gateway attachment with the existing transit gateway route table. Propagate the Direct Connect gateway attachment to this route table.
upvoted 0 times
...
Phung
2 years ago
A) Associate the production VPC attachments with the existing transit gateway route table. Propagate the routes from these attachments.
upvoted 0 times
...
...
Caitlin
2 years ago
Haha, a magic wand would be nice, but I think the network engineer has to do some actual work here. My money's on A, C, and E.
upvoted 0 times
...
Rashida
2 years ago
Wait, can't we just use a magic wand to make everything work? Seriously though, I'm voting for A, C, and E.
upvoted 0 times
Pansy
1 year ago
Definitely, following those steps should help achieve the desired network setup.
upvoted 0 times
...
Izetta
1 year ago
It's important to make sure no data flows between them to maintain security.
upvoted 0 times
...
Major
1 year ago
I agree, those steps seem like they would isolate the development VPC from the production VPCs.
upvoted 0 times
...
Sonia
1 year ago
I think A, C, and E are the best options to complete the solution.
upvoted 0 times
...
...
Matt
2 years ago
Gotta love those transit gateways! I reckon options B, D, and F are the way to do it.
upvoted 0 times
...
Alex
2 years ago
Hmm, this seems pretty straightforward. I think options A, C, and E are the way to go.
upvoted 0 times
France
2 years ago
Yes, those options will help ensure the production VPCs can communicate with each other while keeping the development VPC isolated.
upvoted 0 times
...
Kayleigh
2 years ago
I agree, options A, C, and E make the most sense for this scenario.
upvoted 0 times
...
...

Save Cancel