Amazon ANS-C01 Exam - Topic 7 Question 30 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 30
Topic #: 7

A company has established connectivity between its on-premises data center in Paris, France, and the AWS Cloud by using an AWS Direct Connect connection. The company uses a transit VIF that connects the Direct Connect connection with a transit gateway that is hosted in the Europe (Paris) Region. The company hosts workloads in private subnets in several VPCs that are attached to the transit gateway.

The company recently acquired another corporation that hosts workloads on premises in an office building in Tokyo, Japan. The company needs to migrate the workloads from the Tokyo office to AWS. These workloads must have access to the company's existing workloads in Paris. The company also must establish connectivity between the Tokyo office building and the Paris data center.

In the Asia Pacific (Tokyo) Region, the company creates a new VPC with private subnets for migration of the workloads. The workload migration must be completed in 5 days. The workloads cannot be directly accessible from the internet.

Which set of steps should a network engineer take to meet these requirements?

A1. Create public subnets in the Tokyo VPC to migrate the workloads into.
2. Configure an internet gateway for the Tokyo office to reach the Tokyo VPC.
3. Configure security groups on the Tokyo workloads to only allow traffic from the Tokyo office and the Paris workloads.
4. Create peering connections between the Tokyo VPC and the Paris VPCs.
5. Configure a VPN connection between the Paris data center and the Tokyo office by using existing routers.

B1. Configure a transit gateway in the Asia Pacific (Tokyo) Region. Associate this transit gateway with the Tokyo VPC.
2. Create peering connections between the Tokyo transit gateway and the Paris transit gateway.
3. Set up a new Direct Connect connection from the Tokyo office to the Tokyo transit gateway.
4. Configure routing on both transit gateways to allow data to flow between sites and the VPCs.

C1. Configure a transit gateway in the Asia Pacific (Tokyo) Region. Associate this transit gateway with the Tokyo VPC.
2. Create peering connections between the Tokyo transit gateway and the Paris transit gateway.
3. Configure an AWS Site-to-Site VPN connection from the Tokyo office. Set the Tokyo transit gateway as the target.
4. Configure routing on both transit gateways to allow data to flow between sites and the VPCs.

D1. Configure an AWS Site-to-Site VPN connection from the Tokyo office to the Paris transit gateway.
2. Create an association between the Paris transit gateway and the Tokyo VPC.
3. Configure routing on the Paris transit gateway to allow data to flow between sites and the VPCs.

Show Suggested Answer

Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.

by Estrella at Jun 29, 2024, 08:14 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bernardo

3 months ago

Isn't a Direct Connect from Tokyo to the transit gateway a bit overkill?

upvoted 0 times

...

Lewis

3 months ago

Totally agree with B, it covers all the connectivity needs.

upvoted 0 times

...

Glory

3 months ago

Wait, why would you create public subnets? That doesn't make sense!

upvoted 0 times

...

Vinnie

4 months ago

I think C is better because of the Site-to-Site VPN.

upvoted 0 times

...

Ashanti

4 months ago

Option B seems like the best choice for transit gateways.

upvoted 0 times

...

Shayne

4 months ago

I vaguely recall that peering connections are crucial for communication between VPCs, but I can't remember if we should use a VPN or Direct Connect for the Tokyo office.

upvoted 0 times

...

Gearldine

4 months ago

I'm a bit confused about whether we need public subnets in Tokyo. I thought the workloads shouldn't be directly accessible from the internet.

upvoted 0 times

...

Tora

4 months ago

I think option B sounds familiar; it mentions setting up a transit gateway in Tokyo, which we practiced in a similar scenario.

upvoted 0 times

...

Clarinda

5 months ago

I remember we discussed the importance of using transit gateways for inter-region connectivity, but I'm not sure if we should create a new Direct Connect for Tokyo.

upvoted 0 times

...

Kimberlie

5 months ago

This is a tricky one, but I think I've got it. Option B looks like the way to go - setting up the transit gateways and Direct Connect connections to tie everything together. The key will be configuring the routing properly to ensure the traffic flows as needed.

upvoted 0 times

...

Leana

5 months ago

Hmm, I'm a bit confused about the transit gateway concept and how it relates to the VPCs and Direct Connect connections. I'll need to review the details carefully to make sure I understand the full requirements.

upvoted 0 times

...

Percy

5 months ago

This seems like a complex networking scenario, but I think I can tackle it. The key is to establish the right connectivity between the Tokyo office and the Paris data center, while keeping the workloads secure.

upvoted 0 times

...

Suzan

5 months ago

Okay, I've got a plan. I'd go with option C - setting up a transit gateway in the Tokyo region, peering it with the Paris transit gateway, and then using a Site-to-Site VPN to connect the Tokyo office. That way, I can keep the workloads private while still allowing access between the two sites.

upvoted 0 times

...

Shayne

5 months ago

Okay, let's see here. The CMDB is the central repository for information about all the IT assets in an organization. The key tables would likely be the ones that store the actual configuration item (CI) data, as well as the relationships between CIs. I'm going to go with cmdb_ci, cmdb_rel_ci, and sn_cmdb_ci.

upvoted 0 times

...

Darci

5 months ago

Hmm, I'm a bit unsure on this one. I know SNMP is used for network management, but I can't recall which transport protocol it uses.

upvoted 0 times

...

Bronwyn

2 years ago

I'm surprised option A even made it onto the list. Peering between VPCs? What is this, the Stone Age? Option B is the future, my friends.

upvoted 0 times

...

Rachael

2 years ago

Option B is the clear winner here. No need to overcomplicate things with public subnets and internet gateways when you have the powerful Direct Connect and transit gateway features at your disposal.

upvoted 0 times

Ozell

2 years ago

Let's go with Option B for the migration of workloads.

upvoted 0 times

...

Jamal

2 years ago

It's definitely the most efficient way to establish connectivity between the Tokyo office and the Paris data center.

upvoted 0 times

...

Willard

2 years ago

I agree, using transit gateways and Direct Connect makes the most sense.

upvoted 0 times

...

Thomasena

2 years ago

Option B seems like the best choice.

upvoted 0 times

...

Latrice

2 years ago

I personally prefer option D. Configuring an AWS Site-to-Site VPN connection directly from the Tokyo office to the Paris transit gateway seems like a straightforward solution.

upvoted 0 times

...

Ora

2 years ago

Option C is also a viable solution, but it requires an additional VPN connection from the Tokyo office, which could add some complexity. I think option B is the way to go.

upvoted 0 times

Hoa

1 year ago

It's important to ensure smooth data flow between the sites and VPCs during the migration.

upvoted 0 times

...

Carlene

1 year ago

Yeah, setting up a new Direct Connect connection from Tokyo to the transit gateway makes sense.

upvoted 0 times

...

Paola

1 year ago

I agree, option B seems like the most straightforward solution.

upvoted 0 times

...

Glennis

2 years ago

It definitely seems like the most efficient way to establish connectivity between the Tokyo office and the Paris data center.

upvoted 0 times

...

Nettie

2 years ago

Yeah, setting up a transit gateway in Tokyo and connecting it to the Paris transit gateway sounds like the best approach.

upvoted 0 times

...

Bobbye

2 years ago

I agree, option B seems like the most straightforward solution.

upvoted 0 times

...

Geraldine

2 years ago

I'm not sure, I think option C could also work. Setting up an AWS Site-to-Site VPN connection from the Tokyo office might be a good alternative.

upvoted 0 times

...

Wendell

2 years ago

I agree with Amos. Option B seems to be the most efficient way to establish connectivity between the Tokyo office and the Paris data center.

upvoted 0 times

...

Jolanda

2 years ago

I agree with Dortha. Option B covers all the necessary steps, including the creation of peering connections between the transit gateways in Tokyo and Paris. This ensures seamless communication between the workloads.

upvoted 0 times

Reuben

2 years ago

I think so too. It covers all the necessary steps for the migration.

upvoted 0 times

...

Kristal

2 years ago

Option B seems like the best choice for this scenario.

upvoted 0 times

...

Amos

2 years ago

I think option B is the best choice because it involves setting up a transit gateway in Tokyo and creating peering connections with Paris.

upvoted 0 times

...

Dortha

2 years ago

The steps provided in option B seem to be the most comprehensive and straightforward approach to meeting the requirements. Establishing a direct connection from the Tokyo office to the Tokyo transit gateway is a smart move.

upvoted 0 times