Discuss Amazon ANS-C01 Exam Topic 5 Question 33

A company has a VPC in the AWS Cloud. The company recently acquired a competitor that also has a VPC in the AWS Cloud. A network engineer discovers an IP address overlap between the two VPCs. Both VPCs require access to an AWS Marketplace partner service.

Which solution will ensure interoperability among the VPC hosted services and the AWS Marketplace partner service?

AConfigure VPC peering with static routing between the VPCs. Configure an AWS Site-to-Site VPN connection with static routing to the partner service.

BConfigure a NAT gateway in the VPCs. Configure default routes in each VPC to point to the local NAT gateway. Attach each NAT gateway to a transit gateway. Configure an AWS Site-to-Site VPN connection with static routing to the partner service.

CConfigure AWS PrivateLink to facilitate connectivity between the VPCs and the partner service. Use the DNS name that is created with the associated interface endpoints to route traffic between the VPCs and the partner service.

DConfigure a NAT instance in the VPCs. Configure default routes in each VPC to point to the local NAT instance. Configure an interface endpoint in each VPC to connect to the partner service. Use the DNS name that is created with the associated interface endpoints to route traffic between the VPCs and the partner service.

Suggested Answer: B, C

To use AWS PrivateLink, you need to create interface type VPC endpoints for the services that you want to access privately from your VPC1. These endpoints appear as elastic network interfaces (ENIs) with private IPs in your subnets2. To enable DNS resolution for these endpoints, you need to set the enableDnsSupport attribute to True for your VPC, and enable DNS support for each endpoint3. You also need to ensure that the VPC endpoint policy allows communication between your VPC and the service4. You do not need to create any route table entries or Route 53 hosted zones for the endpoints, as they are not required for PrivateLink5.

AWS PrivateLink FAQs -- Amazon Web Services 2: AWS PrivateLink and service endpoint - Amazon EC2 Overview and Networking Introduction for Telecom Companies 3: VPC Endpoints: Secure and Direct Access to AWS Services 4: AWS PrivateLink and service endpoint - Amazon EC2 Overview and Networking Introduction for Telecom Companies 5: AWS Private Link vs VPC Endpoint - Stack Overflow

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

35 comments · newest first

Gilma 11 months ago

I think peering might work too, but C looks cleaner.

Georgeanna 11 months ago

Wait, are we really sure about the IP overlap issue?

Cristal 11 months ago

Not sure about that, NAT gateways can add complexity.

Vilma 11 months ago

I agree, PrivateLink is a solid solution!

Lucia 12 months ago

Option C seems like the best choice for VPC connectivity.

Dion 12 months ago

I feel like using a NAT instance might be outdated compared to newer solutions like PrivateLink. I wonder if that's the right choice here.

Viola 1 year ago

I practiced a similar question about NAT gateways, but I can't recall if they work well with overlapping IPs.

Marla 1 year ago

I think AWS PrivateLink could be a good option here. It seems like it would solve the connectivity issue without needing to change the IPs.

Maryann 1 year ago

I remember studying VPC peering, but I'm not sure if static routing is the best way to handle IP overlaps.

Shannan 1 year ago

Based on the information provided, I believe Option C is the most appropriate solution. Using AWS PrivateLink to facilitate connectivity between the VPCs and the partner service seems like the cleanest way to address the IP address overlap.

Cecily 1 year ago

I'm a bit confused by the different routing options presented. I'll need to review the details of each approach to determine which one best fits the requirements.

Arminda 1 year ago

I think the key here is finding a solution that can handle the IP address overlap and provide secure connectivity to the partner service. Option C with AWS PrivateLink seems like the most elegant solution.

Leah 1 year ago

Okay, let's think this through step-by-step. We have two VPCs with IP address overlap, and we need to connect them to an AWS Marketplace partner service. Hmm, this could get tricky.

Kayleigh 1 year ago

This question seems straightforward, but I want to make sure I understand the requirements correctly before choosing an answer.

Claudia 1 year ago

I'm a bit confused by the "Stop" profile. Does that mean the other profiles won't be applied? Or will the user still get everything except the "Stop" profile? I'll need to think this through carefully.

Grover 1 year ago

This looks like a pretty straightforward question. I'll go through the options carefully and try to identify the key elements of a valid arrest.

Kaitlyn 1 year ago

I'm with Jacinta on this one. Putting a NAT instance in each VPC? That's like using a rotary phone to call your grandma. Option C is the clear winner here.

Makeda 1 year ago

↳ replying to Kaitlyn

Yeah, setting up VPC peering with static routing seems like a hassle compared to using AWS PrivateLink.

Willard 1 year ago

↳ replying to Kaitlyn

I agree, using AWS PrivateLink makes the most sense in this scenario.

Dell 1 year ago

↳ replying to Kaitlyn

Option C is definitely the way to go. It's the most modern and efficient solution.

Jacinta 1 year ago

Haha, a NAT instance? What is this, the 90s? Option D is way too clunky. PrivateLink is the future, baby!

Vonda 1 year ago

↳ replying to Jacinta

Yeah, NAT instance seems like a step back in time compared to PrivateLink.

Merilyn 1 year ago

↳ replying to Jacinta

I agree, PrivateLink is definitely the more modern and efficient solution.

Zana 1 year ago

↳ replying to Jacinta

Option D is outdated, PrivateLink is the way to go!

Marge 1 year ago

I'm not a fan of using a transit gateway in this scenario. It adds an unnecessary layer of complexity. Option C is the way to go for sure.

Benton 1 year ago

↳ replying to Marge

Let's go with Option C then. It's the most efficient choice.

Gwen 1 year ago

↳ replying to Marge

Yeah, AWS PrivateLink simplifies the connectivity between VPCs and the partner service.

Stefan 1 year ago

↳ replying to Marge

I think Option C with AWS PrivateLink is the most straightforward solution.

Graham 1 year ago

↳ replying to Marge

I agree, using a transit gateway does seem like overkill.

Jerry 2 years ago

Option C seems like the most straightforward and scalable solution. Using PrivateLink to connect the VPCs and the partner service is a clean and efficient way to handle the IP address overlap.

Kirby 1 year ago

↳ replying to Jerry

Almeta 1 year ago

↳ replying to Jerry

Telma 2 years ago

But wouldn't using NAT gateways and transit gateways provide better connectivity?

Carolynn 2 years ago

I disagree, I believe configuring AWS PrivateLink is the way to go for interoperability.

Telma 2 years ago

I think the best solution is to configure VPC peering with static routing between the VPCs.

Amazon ANS-C01 Exam - Topic 5 Question 33 Discussion