CompTIA Cloud+ (CV0-004)Cloud ArchitectureHard

A cloud administrator needs to implement a solution that allows multiple Virtual Private Clouds (VPCs) in different regions to communicate with each other and also connect to an on-premises data center through a single, centralized gateway. This solution aims to simplify network topology and management. Which networking component should be used?

  1. ATransit Gateway
  2. BInternet Gateway (IGW)
  3. CVPC Peering
  4. DVirtual Private Gateway (VPG)
Show answer & explanation

Correct answer: A. Transit Gateway

A Transit Gateway acts as a central hub for connecting multiple VPCs and on-premises networks, including cross-region connectivity, simplifying complex network topologies into a hub-and-spoke model.

Why the other options are wrong

  • B. An Internet Gateway (IGW) provides internet access for a VPC and is not designed for private inter-VPC or on-premises connectivity.
  • C. VPC Peering connects two VPCs directly, requiring a mesh of connections for multiple VPCs and not supporting on-premises connectivity through a single hub.
  • D. A Virtual Private Gateway (VPG) is primarily used for connecting a single VPC to an on-premises network via VPN or Direct Connect, not for inter-VPC communication across multiple regions or as a central hub.

Transit Gateway

A Transit Gateway is a network transit hub that you can use to interconnect your Virtual Private Clouds (VPCs) and on-premises networks. It scales to thousands of VPCs, simplifies network management, and supports cross-region connectivity.

  • Central network hub for VPCs and on-premises networks
  • Simplifies complex network topologies (hub-and-spoke)
  • Scales to thousands of VPCs
  • Supports cross-region connectivity
  • Reduces the need for many-to-many peering connections

Memory trick: Transit Gateway is the 'traffic control tower' for your sprawling cloud network, centralizing all connections.

More Cloud Architecture questions