Amazon Exam SCS-C02 Topic 6 Question 29 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 29
Topic #: 6

A company has two AWS accounts: Account A and Account B Each account has a VPC. An application that runs in the VPC in Account A needs to write to an Amazon S3 bucket in Account B. The application in Account A already has permission to write to the S3 bucket in Account B.

The application and the S3 bucket are in the same AWS Region. The company cannot send network traffic over the public internet.

Which solution will meet these requirements? b

AIn both accounts, create a transit gateway and VPC attachments in a subnet in each Availability Zone. Update the VPC route tables.

BDeploy a software VPN appliance in Account A. Create a VPN connection between the software VPN appliance and a virtual private gateway in Account B

CCreate a VPC peering connection between the VPC in Account A and the VPC in Account B. Update the VPC route tables, network ACLs, and security groups to allow network traffic between the peered IP ranges.

DIn Account A. create a gateway VPC endpoint for Amazon S3. Update the VPC route table in Account A.

Show Suggested Answer

Suggested Answer: A, C, D

by julien at Sep 16, 2024, 09:43 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ulysses

3 months ago

D is the way to go. I don't want to deal with setting up a software VPN appliance or any of that other complicated stuff. Keep it simple!

upvoted 0 times

Isadora

2 months ago

Yeah, let's keep it simple and go with option D.

upvoted 0 times

...

Glynda

2 months ago

I agree, setting up a gateway VPC endpoint for Amazon S3 in Account A is the simplest solution.

upvoted 0 times

...

Alyce

2 months ago

D is definitely the easiest option. No need to overcomplicate things.

upvoted 0 times

...

Rosita

3 months ago

Haha, I'm definitely not choosing A. Setting up a transit gateway and VPC attachments sounds like way too much work for this use case!

upvoted 0 times

...

Hannah

3 months ago

I'm leaning towards C. A VPC peering connection between the two accounts might be a bit more complex, but it seems like a robust solution that doesn't require any additional components.

upvoted 0 times

Novella

2 months ago

That's true, but with VPC peering, we don't have to worry about additional components like VPN appliances.

upvoted 0 times

...

Javier

3 months ago

But wouldn't setting up a transit gateway be easier to manage in the long run?

upvoted 0 times

...

Dominque

3 months ago

I think C is the best option too. It's a direct connection between the VPCs.

upvoted 0 times

...

Veta

4 months ago

I think the correct answer is D. Creating a gateway VPC endpoint for Amazon S3 in Account A seems like the most straightforward solution that meets the requirements.

upvoted 0 times

Hassie

2 months ago

I agree. It's important to choose the solution that meets the requirements while also considering security and performance.

upvoted 0 times

...

Kate

2 months ago

Exactly. It's a secure and efficient way to enable communication between the two accounts.

upvoted 0 times

...

Christiane

2 months ago

That makes sense. It would allow the application in Account A to write to the S3 bucket in Account B without sending network traffic over the public internet.

upvoted 0 times

...

Mary

2 months ago

I think the correct answer is D. Creating a gateway VPC endpoint for Amazon S3 in Account A seems like the most straightforward solution that meets the requirements.

upvoted 0 times

...