AWS Certified Advanced Networking – Specialty (ANS-C01) — Question 58

A company uses AWS Direct Connect to connect its corporate network to multiple VPCs in the same AWS account and the same AWS Region. Each VPC uses its own private VIF and its own virtual LAN on the Direct Connect connection. The company has grown and will soon surpass the limit of VPCs and private VIFs for each connection.
What is the MOST scalable way to add VPCs with on-premises connectivity?

Answer options

• A. Provision a new Direct Connect connection to handle the additional VPCs. Use the new connection to connect additional VPCs.
• B. Create virtual private gateways for each VPC that is over the service quota. Use AWS Site-to-Site VPN to connect the virtual private gateways to the corporate network.
• C. Create a Direct Connect gateway, and add virtual private gateway associations to the VPCs. Configure a private VIF to connect to the corporate network.
• D. Create a transit gateway, and attach the VPCs. Create a Direct Connect gateway, and associate it with the transit gateway. Create a transit VIF to the Direct Connect gateway.

Correct answer: D

Explanation

The correct answer is D because creating a transit gateway allows for efficient connectivity between multiple VPCs and simplifies management as the company scales. Option A would require additional resources without improving scalability, option B does not utilize Direct Connect effectively, and option C lacks the comprehensive management capabilities provided by a transit gateway.