AWS Certified Advanced Networking Specialty Practice Exam

In a transit VPC architecture, what termination endpoint should be chosen on the spokes for least management overhead?

1. Customer Gateway (CGW)

2. Dynamic Routing Gateway (DRG)

3. Virtual Private Gateway (VGW)

4. Direct Connect Gateway

The correct answer is: Virtual Private Gateway (VGW)

In a transit VPC architecture, opting for a Virtual Private Gateway (VGW) on the spokes minimizes management overhead significantly when setting up and maintaining connectivity between multiple VPCs and on-premises networks. The VGW serves as a target for VPN connections. It simplifies configuration since it allows for secure connections over the Internet or through AWS Direct Connect, without requiring extensive routing setups. Additionally, VGWs natively support BGP (Border Gateway Protocol), which facilitates dynamic routing updates. This dynamism reduces the manual effort involved in maintaining static routes, thus lowering management tasks and overhead. This option is preferable because it provides an efficient way to manage the connectivity while ensuring high availability and security without the need for additional configurations or components that could increase management complexity. In contrast, Customer Gateways and Direct Connect Gateways may require more hands-on management and may involve additional configurations per connection, making these options less ideal for minimizing management efforts. The Dynamic Routing Gateway is a construct not typically referenced directly in transit VPC setups and may imply setups that are more complex and manually intensive.