SAA-C03 Q415 · Networking

Question

A company is planning to connect a remote office to its AWS infrastructure. The office equires permanent and secure connectivity to AWS. The connection must provide secure access to resources in two VPCs. However, the VPCs must not be able to access each other.

Accepted Answer

Let's break down each requirement and see how Option B satisfies them:

**Requirement 1: Permanent and secure connectivity to AWS**
→ AWS Site-to-Site VPN provides encrypted IPsec tunnels over the internet, offering persistent, secure connectivity. Each VPN connection creates redundant tunnels for high availability.

**Requirement 2: Secure access to resources in TWO VPCs**
→ By setting up one Site-to-Site VPN connection to each VPC individually, the remote office gets direct, independent access to both VPCs. Each VPC has its own Virtual Private Gateway (VGW) attached, and the VPN terminates directly at each VPC.

**Requirement 3: VPCs must NOT be able to access each other**
→ This is the critical constraint. Since each VPN connection is independent and terminates at each VPC's own VGW, th

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips