SAP-C02 Practice Question: Design Solutions for Organizational Complexity
A global company uses AWS Organizations with hundreds of accounts. The networking team needs to allow VPCs in different accounts to communicate privately using AWS Transit Gateway. The company wants to centralize management while allowing individual account owners to create and attach VPCs. Which solution meets these requirements?
⚠ Common exam trap
Candidates often confuse AWS PrivateLink (which is for service exposure, not general routing) with Transit Gateway, or assume VPC peering can be scaled via a central VPC, failing to recognize that peering is non-transitive and requires a full mesh for multi-VPC connectivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a Transit Gateway in the networking account and share it with other accounts using AWS Resource Access Manager.
AWS Transit Gateway allows you to centralize network connectivity across multiple VPCs and accounts. By creating the Transit Gateway in the networking account and sharing it via AWS Resource Access Manager (RAM), you enable individual account owners to attach their VPCs to the shared Transit Gateway, achieving private communication while maintaining centralized management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a VPN connection from each VPC to a central network appliance.
Why it's wrong here
Does not scale and adds complexity.
- ✗
Use AWS PrivateLink to connect each VPC to a central VPC endpoint service.
Why it's wrong here
PrivateLink is for service access, not full VPC-to-VPC routing.
- ✓
Create a Transit Gateway in the networking account and share it with other accounts using AWS Resource Access Manager.
Why this is correct
Allows centralized management and self-service attachment via RAM.
- ✗
Create VPC peering connections between each VPC and a central VPC.
Why it's wrong here
Number of peering connections grows quadratically, not manageable.
Go deeper
Related to this question
About these practice questions
One of 1,660 original SAP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.