AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ82

Network Design

A company has created three VPCs: a production VPC, a nonproduction VPC, and a shared services VPC. The production VPC and the nonproduction VPC must each be able to communicate with the shared services VPC. Communication between the production VPC and the nonproduction VPC must not be allowed. A transit gateway is deployed to enable communication among the VPCs.

Which transit gateway route table configurations meet these requirements?

  • A Configure a route table with the production and nonproduction VPC attachments associated with propagated routes for only the shared services VPC. Create an additional route table with only the shared services VPC attachment associated with propagated routes from the production and nonproduction VPCs.
  • B Configure a route table with the production and nonproduction VPC attachments associated with propagated routes for each VPC. Create an additional route table with only the shared services VPC attachment associated with propagated routes from each VPC.
  • C Configure a route table with all the VPC attachments associated with propagated routes for only the shared services VPCreate an additional route table with only the shared services VPC attachment associated with propagated routes from the production and nonproduction VPCs.
  • D Configure a route table with the production and nonproduction VPC attachments associated with propagated routes disabled. Create an additional route table with only the shared services VPC attachment associated with propagated routes from the production and nonproduction VPCs.
Explanation

Transit Gateway routes traffic according to the route table associated with the source attachment. A route table associated with the production and nonproduction attachments that contains only the shared-services route permits both VPCs to reach shared services while omitting routes between production and nonproduction. A separate route table associated with the shared-services attachment must contain propagated routes to both production and nonproduction to provide return connectivity. AWS documents this isolated-router pattern: isolated attachments have no routes to one another but can communicate with a shared-services attachment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!