Free Amazon ANS-C01 Actual Exam Questions - Question 7 Discussion
the AWS Cloud by using an AWS Direct Connect connection. The company uses a transit VIF that
connects the Direct Connect connection with a transit gateway that is hosted in the Europe (Paris)
Region. The company hosts workloads in private subnets in several VPCs that are attached to the
transit gateway.
The company recently acquired another corporation that hosts workloads on premises in an office
building in Tokyo, Japan. The company needs to migrate the workloads from the Tokyo office to AWS.
These workloads must have access to the company's existing workloads in Paris. The company also
must establish connectivity between the Tokyo office building and the Paris data center.
In the Asia Pacific (Tokyo) Region, the company creates a new VPC with private subnets for migration
of the workloads. The workload migration must be completed in 5 days. The workloads cannot be
directly accessible from the internet.
Which set of steps should a network engineer take to meet these requirements?
It’s C, since transit gateway peering isn’t cross-region but VPN to the Tokyo transit gateway works.
It’s C since transit gateway peering across regions isn’t possible, so VPN links make sense.
It’s C. Transit gateway peering isn’t supported across regions, so C uses a VPN to connect the Tokyo office to its transit gateway, then connects that to Paris via VPN and proper routing—works within the timeline without new Direct Connect.
Option B looks off since setting up a new Direct Connect from Tokyo will take way longer than 5 days. Also, transit gateway peering is regional, so peering between Paris and Tokyo transit gateways isn’t supported.
It’s D. It uses the existing Paris transit gateway and adds VPN from Tokyo without extra transit gateways, which seems faster and simpler for a 5-day timeline.