SAP-C02 Practice Question: Design Solutions for Organizational Complexity
A company is using AWS Organizations with a centralized networking account that hosts a transit gateway. The company wants to ensure that all traffic between VPCs in different accounts flows through the transit gateway. Which THREE steps are required to implement this architecture?
⚠ Common exam trap
Watch out — candidates often confuse VPC endpoints (used for AWS service access) with transit gateway attachments, or mistakenly think VPC peering is required when the transit gateway already provides the necessary connectivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Attach the VPCs in member accounts to the transit gateway.
Attaching the VPCs in member accounts to the transit gateway is a fundamental step to establish connectivity. The transit gateway acts as a central hub, and each VPC must be explicitly attached to it to route traffic through the gateway. Without attachment, the transit gateway cannot forward traffic to or from those VPCs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Attach the VPCs in member accounts to the transit gateway.
Why this is correct
VPCs must be attached to the transit gateway to route traffic through it.
- ✓
Update the route tables of the VPCs to point to the transit gateway for inter-VPC traffic.
Why this is correct
Routes must be added to direct traffic to the transit gateway.
- ✗
Create VPC endpoints for the transit gateway in each VPC.
Why it's wrong here
VPC endpoints are used for private access to AWS services, not for routing to transit gateways.
- ✗
Create VPC peering connections between each VPC and the networking VPC.
Why it's wrong here
VPC peering would create direct connections, bypassing the transit gateway.
- ✓
Share the transit gateway with the member accounts using AWS Resource Access Manager.
Why this is correct
Resource Access Manager allows sharing transit gateways across accounts.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.