AWS Certified Advanced Networking – Specialty (ANS-C01) — Question 254

A company runs workloads in multiple VPCs in the us-east-1 Region. The VPCs are connected to a transit gateway. An AWS Direct Connect connection provides private connectivity between a data center that is in the US and the transit gateway. A Direct Connect gateway is associated with the transit gateway.

The company has recently opened a new office location in London. The company plans to launch cloud services in multiple VPCs in the eu-west-2 Region. Users in the new London office must have private access to the workloads that run in us-east-1. Users in the US data center must have access to any workloads that are created in eu-west-2. A network engineer must implement a flexible solution that provides users the required access. The solution must be able to accommodate future growth.

Which solution will meet these requirements with the LEAST operational effort?

Answer options

• A. Create an AWS Site-to-Site VPN connection from the London office to the Direct Connect gateway in us-east-1.
• B. Establish a new Direct Connect connection for the London office. Attach the new Direct Connect connection to the existing Direct Connect gateway. Create a transit gateway in eu-west-2. Associate the new transit gateway with the existing Direct Connect gateway. Create a peering connection between the transit gateways in us-east-1 and eu-west-2.
• C. Create an AWS Site-to-Site VPN connection from the London office to each of the VPCs that are in us-east-1.
• D. Establish a new AWS Direct Connect connection for the London office Create a new Direct Connect gateway and a transit gateway in eu-west-2. Attach the new Direct Connect connection to the new Direct Connect gateway. Create a peering connection between the transit gateways in us-east-1 and eu-west-2.

Correct answer: B

Explanation

Option B is correct because it utilizes an existing infrastructure, allowing seamless integration between the two regions while enabling future scalability. Options A and C require additional VPN setups, leading to increased operational complexity, while Option D involves creating new resources that are unnecessary given the existing Direct Connect gateway.