MENU
A company has introduced a new policy that allows employees to work remotely from their homes if they connect by using a VPN The company Is hosting Internal applications with VPCs in multiple AWS accounts Currently the applications are accessible from the company's on-premises office network through an AWS Site-to-Site VPN connection The VPC in the company's main AWS account has peering connections established with VPCs in other AWS accounts.
A solutions architect must design a scalable AWS Client VPN solution for employees to use while they work from home
What is the MOST cost-effective solution that meets these requirements?
Suggested Answer: C
Get Premium SAP-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/scenario-peered.html
22 comments · newest first
MA
Marie Sokolov
13 days ago
B makes the most sense here because a single Client VPN in the main account can reach cross-account peered VPCs, avoiding multiple endpoints.
RY
Ryan Clark
3 days ago
How would the main AWS account's Client VPN reach cross-account peered VPCs given VPC peering doesn't support transitive routing?
RO
Rosann
2 months ago
A might be more scalable in the long run.
AL
Alfred
2 months ago
I feel like B balances cost and functionality well.
LI
Lindsey
2 months ago
D is interesting. It connects directly to the Site-to-Site VPN.
SA
Santos
2 months ago
Option C seems too complex. Transit gateways add extra cost.
RO
Rosamond
3 months ago
I prefer option A. Multiple endpoints can handle more users.
LE
Leota
3 months ago
I think option B is the best. Simple and effective.
CA
Carey
3 months ago
Really? A Client VPN in each account? That sounds expensive!
BE
Bettina
3 months ago
I think A could work too, but managing multiple endpoints sounds tricky.
CA
Carla
3 months ago
Wait, why not just use D? That connects directly to the Site-to-Site VPN!
EU
Eugene
3 months ago
I disagree, C might be better for scalability in the long run.
ER
Erasmo
4 months ago
Option B seems like the simplest and most cost-effective.
MA
Marquetta
4 months ago
Is it really cost-effective though? I have my doubts!
NO
Noelia
4 months ago
I agree with B, it keeps things centralized.
RE
Rene
4 months ago
Wait, why not just use D? That sounds efficient!
MA
Malcom
6 months ago
I think C is overkill for this scenario.
AL
Alex
6 months ago
Option B seems like the simplest solution.
JA
Janine
6 months ago
I’m a bit confused about whether we need a Client VPN in each account or just one in the main account. I guess it depends on how the applications are set up.
NI
Nidia
7 months ago
I’m leaning towards option D because it mentions connecting to the Site-to-Site VPN, which seems like it could simplify access to internal applications.
OS
Osvaldo
7 months ago
I remember practicing a similar question, and I feel like using a transit gateway could be more scalable, but it might not be the most cost-effective.
ER
Ernie
7 months ago
I think option B might be the most straightforward since it centralizes the Client VPN in the main account, but I'm not entirely sure about the routing requirements.