Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answers are B, D, and F. B sets up scalable on-prem to AWS connectivity using a Direct Connect Gateway and a Transit Gateway. D allows you to share the TGW across accounts and attach VPCs easily. F ensures outbound internet traffic goes through the on-premises NAT, as required. Avoid options like A (too manual), C (introduces IGW), or E (non-transitive, doesn’t scale).
B. Create a Direct Connect gateway and a transit gateway in the central network account. Attach the transit gateway to the Direct Connect gateway by using a transit VIF. D. Share the transit gateway with other accounts. Attach VPCs to the transit gateway. F. Provision only private subnets. Open the necessary route on the transit gateway and customer gateway to allow outbound internet traffic from AWS to flow through NAT services that run in the data center.
BDF is most scalable solution.