ExamPark
Course menuSOA-C03

Exams / SOA-C03 / VPC endpoints, PrivateLink and peering / Question 1

SOA-C03 practice question: VPC endpoints, PrivateLink and peering (1 of 2)

Networking and Content Delivery A free question from our original SOA-C03 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A logistics broker runs a rate-quoting service in its own VPC and wants to offer it privately to 30 partner companies, each with its own AWS account and VPC.

Several partner VPCs use the same CIDR range as the broker's VPC.

Partners must reach only the quoting service, not the rest of the broker's network, and traffic must not cross the internet.

What should a CloudOps engineer do?

Choose one answer.

  1. A. Create a VPC peering connection with each partner VPC and add routes to the quoting service's subnet.
  2. B. Put the service behind a Network Load Balancer, create a VPC endpoint service, and let each partner create an interface endpoint to it.
  3. C. Attach all partner VPCs to a transit gateway in the broker's account and share it with the partners through AWS RAM.
  4. D. Expose the service through a public Network Load Balancer and allow only the partners' NAT gateway addresses in its security group.
Show the answer and explanation

Answer: B

Explanation

AWS PrivateLink is the way to share a single service privately with many VPCs. The provider places the service behind a Network Load Balancer and creates an endpoint service, and each consumer creates an interface endpoint. Traffic stays on the AWS network, overlapping CIDR ranges are fine, and no wider network access is opened.

Sharing a service with consumer VPCs through AWS PrivateLink Two consumer VPCs, both using 10.0.0.0/16, each have an interface endpoint. The endpoints connect to the provider's endpoint service, which sends traffic to a Network Load Balancer in front of the shared service in the provider VPC, which also uses 10.0.0.0/16. Consumer A Consumer B Interface endpoint VPC 10.0.0.0/16 Interface endpoint VPC 10.0.0.0/16 Endpoint service AWS PrivateLink Provider VPC, 10.0.0.0/16 Network LB Shared service
Partners reach only the service behind the load balancer, and overlapping CIDR ranges do not matter.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free SOA-C03 practice examPractice VPC endpoints, PrivateLink and peeringAll VPC endpoints, PrivateLink and peering questions

Want more on VPC endpoints, PrivateLink and peering? The 5 full-length practice sets have 10 more VPC endpoints, PrivateLink and peering questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets