ExamPark
Course menuSOA-C03

Exams / SOA-C03 / VPC endpoints, PrivateLink and peering / Question 1

SOA-C03 practice question: VPC endpoints, PrivateLink and peering (1 of 2)

Networking and Content Delivery A free question from our original SOA-C03 practice exam. Try it, then open the answer to see why each option is right or wrong.

A logistics broker runs a rate-quoting service in its own VPC and wants to offer it privately to 30 partner companies, each with its own AWS account and VPC. Several partner VPCs use the same CIDR range as the broker's VPC. Partners must reach only the quoting service, not the rest of the broker's network, and traffic must not cross the internet. What should a CloudOps engineer do?

Choose one answer.

  1. A. Create a VPC peering connection with each partner VPC and add routes to the quoting service's subnet.
  2. B. Put the service behind a Network Load Balancer, create a VPC endpoint service, and let each partner create an interface endpoint to it.
  3. C. Attach all partner VPCs to a transit gateway in the broker's account and share it with the partners through AWS RAM.
  4. D. Expose the service through a public Network Load Balancer and allow only the partners' NAT gateway addresses in its security group.
Show the answer and explanation

Answer: B

Explanation

AWS PrivateLink is the way to share a single service privately with many VPCs. The provider places the service behind a Network Load Balancer and creates an endpoint service, and each consumer creates an interface endpoint. Traffic stays on the AWS network, overlapping CIDR ranges are fine, and no wider network access is opened.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free SOA-C03 practice examPractice VPC endpoints, PrivateLink and peeringAll VPC endpoints, PrivateLink and peering questions