AWS Certified Sysops Administrator Associate · Free Practice Question Medium
Question 30
A company has configured a backup of their VPC in another Region. Data will be replicated from the primary region to the secondary region. Company policy mandates that all data must be encrypted and must not traverse the public internet.
How should the SysOps Administrator connect the two VPCs while meeting the compliance requirements?
-
A
Configure an internet gateway in each VPC and use these as the targets for the VPC route tables.
-
B
Configure inter-region VPC peering between the two VPCs, then configure route tables.
-
C
Configure an AWS Managed VPN between each VPC, then configure the route tables.
-
D
Configure NAT gateways in both VPCs, then configure the route tables.
Reveal correct answer
Correct answer: B
Explanation
Inter-Region VPC Peering provides a simple and cost-effective way to share resources between regions or replicate data for geographic redundancy. Inter-Region VPC Peering encrypts inter-region traffic with no single point of failure or bandwidth bottleneck.
Traffic using Inter-Region VPC Peering always stays on the global AWS backbone and never traverses the public internet, thereby reducing threat vectors, such as common exploits and DDoS attacks.
CORRECT: "Configure inter-region VPC peering between the two VPCs, then configure route tables" is the correct answer.
INCORRECT: "Configure an AWS Managed VPN between each VPC, then configure the route tables" is incorrect. Using AWS Managed VPN connections between two VPCs is not a best practice solution.
INCORRECT: "Configure NAT gateways in both VPCs, then configure the route tables" is incorrect. You cannot use NAT gateways for creating a private, encrypted connection between two VPCs.
INCORRECT: "Configure an internet gateway in each VPC and use these as the targets for the VPC route tables" is incorrect. You cannot create a private, encrypted connection between two VPCs using internet gateways.
References:
https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
