AWS Certified Solutions Architect – Professional (SAP-C02) — Question 195

A company is building a hybrid environment that includes servers in an on-premises data center and in the AWS Cloud. The company has deployed Amazon EC2 instances in three VPCs. Each VPC is in a different AWS Region. The company has established an AWS Direct. Connect connection to the data center from the Region that is closest to the data center.

The company needs the servers in the on-premises data center to have access to the EC2 instances in all three VPCs. The servers in the on-premises data center also must have access to AWS public services.

Which combination of steps will meet these requirements with the LEAST cost? (Choose two.)

Answer options

• A. Create a Direct Connect gateway in the Region that is closest to the data center. Attach the Direct Connect connection to the Direct Connect gateway. Use the Direct Connect gateway to connect the VPCs in the other two Regions.
• B. Set up additional Direct Connect connections from the on-premises data center to the other two Regions.
• C. Create a private VIF. Establish an AWS Site-to-Site VPN connection over the private VIF to the VPCs in the other two Regions.
• D. Create a public VIF. Establish an AWS Site-to-Site VPN connection over the public VIF to the VPCs in the other two Regions.
• E. Use VPC peering to establish a connection between the VPCs across the Regions Create a private VIF with the existing Direct Connect connection to connect to the peered VPCs.

Correct answer: A, D

Explanation

Option A is correct as it allows a Direct Connect gateway to connect multiple VPCs across different Regions, providing access with minimal cost. Option D is also correct as it enables access to AWS public services. Options B and C involve higher costs due to additional connections, and E is not suitable since VPC peering cannot be utilized with Direct Connect in this manner.