You are designing the network infrastructure for an application server in Amazon VPC Users will access all the
application instances from the Internet as well as from an on-premises network The on-premises network is
connected to your VPC over an AWS Direct Connect link.
How would you design routing to meet the above requirements?
A.
Configure a single routing Table with a default route via the Internet gateway Propagate a default route via
BGP on the AWS Direct Connect customer router Associate the routing table with all VPC subnets.
B.
Configure a single routing table with a default route via the internet gateway Propagate specific routes for
the on-premises networks via BGP on the AWS Direct Connect customer router Associate the routing table
with all VPC subnets.
C.
Configure a single routing table with two default routes: one to the internet via an Internet gateway the
other to the on-premises network via the VPN gateway use this routing table across all subnets in your VPC.
D.
Configure two routing tables one that has a default route via the Internet gateway and another that has a
default route via the VPN gateway Associate both routing tables with each VPC subnet.
B
A
I agree with Kiran.
https://aws.amazon.com/directconnect/faqs/
You can advertise the default route via BGP.
Isn’t the issue with A that you are then back-hauling all of your internet traffic over your DirectConnect to the internet service in your data center?
B
B
B) is the right answer because def. route must be set to Inet GW to reach ANY Inet destinations and specific routes propagatin via BGP to learn on-premises router which AWS subnets are available via AWS DC link.
B
B
A is wrong because propagating default route would cause conflict
Configure a single routing table with a default route via the internet gateway Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router Associate the routing table with all VPC subnets.
Is this really a Solutions Architect Associate question?
B
B
You cant have 2 default routes in the VPC route table.
Correct Answer is B