SAP-C02 Practice Question: Design Solutions for Organizational Complexity
A multinational enterprise uses AWS Organizations with 300 accounts. The network team wants to centrally manage VPC IP address allocation and share subnets across multiple accounts to simplify connectivity. They also need to ensure that when a new account is created, it automatically receives a VPC with a predefined CIDR that does not overlap with existing VPCs. Which combination of AWS services should they use?
⚠ Common exam trap
The trap here is assuming that AWS Transit Gateway or CloudFormation StackSets handle IP address management, when they do not; IPAM is the dedicated service for automated CIDR allocation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Resource Access Manager (RAM) to share subnets and Amazon VPC IP Address Manager (IPAM) to allocate non-overlapping CIDRs automatically.
AWS RAM enables subnet sharing across accounts, centralizing subnet management. Amazon VPC IPAM automates CIDR allocation from a central pool, preventing overlaps and simplifying IP address management at scale. This combination directly addresses the need for centralized IP allocation and subnet sharing, and it scales across many accounts without manual tracking.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Resource Access Manager (RAM) to share subnets and AWS Service Catalog to provision VPCs with predefined CIDRs.
Why it's wrong here
AWS RAM can share subnets, but AWS Service Catalog is used to create and manage catalogs of IT services. It does not automatically assign non-overlapping CIDRs from a central pool. Provisioning VPCs via Service Catalog would require custom automation to track CIDR allocations, which adds complexity and does not guarantee non-overlap across accounts.
- ✗
AWS Transit Gateway to connect VPCs and AWS Direct Connect to manage IP allocation.
Why it's wrong here
AWS Transit Gateway is a network transit hub that connects VPCs and on-premises networks, but it does not manage IP address allocation or share subnets. AWS Direct Connect provides dedicated network connectivity, not IP address management. This combination addresses connectivity, not the central IP allocation and subnet sharing required by the scenario.
- ✓
AWS Resource Access Manager (RAM) to share subnets and Amazon VPC IP Address Manager (IPAM) to allocate non-overlapping CIDRs automatically.
Why this is correct
AWS RAM allows sharing subnets across accounts within an organization, centralizing subnet management. Amazon VPC IPAM provides automated CIDR allocation from a central pool, ensuring non-overlapping address ranges across VPCs and accounts. Together, they meet the requirements for centralized IP management and subnet sharing, with minimal manual effort and built-in scalability.
- ✗
AWS CloudFormation StackSets to deploy VPCs with predefined CIDRs and VPC peering to connect them.
Why it's wrong here
CloudFormation StackSets can deploy VPCs across accounts, but CIDRs must be hardcoded or passed as parameters, and StackSets does not automatically ensure non-overlapping ranges. VPC peering is a point-to-point connection that becomes unmanageable at scale with 300 accounts. This approach lacks centralized IP management and does not scale well for connectivity.
Visual reference
Go deeper
Related to this question
About these practice questions
This SAP-C02 question is part of Courseiva's 984-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.