-
Wrong wording in a question?
updated 10 months, 1 week ago
2 Members
·
2
Posts
-
A company has a hybrid network architecture that consists of multiple regional on-premises data centers and hundreds of AWS VPCs in various AWS Regions. The Network Administrator has been tasked to connect all of the company’s VPCs, on-premises networks, SD-WAN (Software-Defined Wide Area Network) virtual appliances, and VPN connections into a single gateway. The solution should also support inter-region peering across multiple AWS regions and provide higher bandwidth performance than a regular VPN connection.
What’s the MOST suitable solution that the Administrator should implement to build the requested network architecture?
Enable inter-region VPC peering and use AWS Managed VPN that supports static routes and dynamic Border Gateway Protocol (BGP) peering and routing policies. Consolidate all external networks by using the AWS Resource Access Manager (AWS RAM).
Set up AWS VPN CloudHub to achieve inter-region VPC access to all of the AWS resources and on-premises data centers. Establish connection to the SD-WAN virtual appliances using Amazon Route 53 Resolver DNS Firewall
Use AWS Transit Gateway to connect the geographically disperse VPCs and remote networks in order to create a global network transit center. Create Transit Gateway Connect attachments to establish a connection to third-party SD-WAN virtual appliances via Generic Routing Encapsulation (GRE) tunnels.
Use AWS Direct Connect Gateway to achieve inter-region VPC access to all of the AWS resources and on-premises data centers. Connect the SD-WAN virtual appliances to your cloud architecture using the AWS Cloud Map service
The correct answer (Bolded) does not answer all the requirements provided in the question “provide higher bandwidth performance than a regular VPN connection”
unless i’m missing anything?
-
Hi Yosef,
Thank you for sharing your thoughts. You have a valid point – using AWS Transit Gateway alone won’t provide higher bandwidth performance than a regular VPN connection. This must be coupled with an AWS Direct Connect connection to properly integrate with the 3rd party SD-WAN virtual appliances.
Our team has updated this item and the change will be reflected in our practice tests soon. Thanks again and all the best in your upcoming exam!
Cheers,
Tutorials Dojo Team
Log in to reply.