SAP-C02 Q172 · Networking

Question

A company has multiple business units that each have separate accounts on AWS. Each business unit manages its own network with several VPCs that have CIDR ranges that overlap. The company’s marketing team has created a new internal application and wants to make the application accessible to all the other business units. The solution must use private IP addresses only. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

This question has three critical requirements: (1) overlapping CIDRs across VPCs, (2) private IP addresses only, and (3) least operational overhead. Let's trace how Option C satisfies each:

**1. Overlapping CIDRs:** AWS PrivateLink is specifically designed to work regardless of overlapping IP ranges. When a consumer creates an interface VPC endpoint, it gets an ENI with a private IP address from the **consumer's own VPC CIDR**. Traffic flows through the AWS PrivateLink fabric — there is no routing between VPC CIDR ranges, so overlapping CIDRs are completely irrelevant.

**2. Private IP addresses only:** Interface VPC endpoints use private IP addresses within the consumer's VPC. The marketing application sits behind a Network Load Balancer in the provider account. All communication stays o

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips