For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 4Question 74
    Hard1 markMultiple Choice
    Domain 1.1: Network ConnectivityTransit GatewayNetworkingHigh Availability

    AWS SAP-C02 · Question 74 · Domain 1.1: Network Connectivity

    An enterprise is building a centralized network egress architecture. All internet-bound traffic from 50 VPCs must be routed through a central Egress VPC. The Egress VPC contains a NAT Gateway. The company wants to ensure that if the NAT Gateway in one Availability Zone fails, traffic automatically routes to a NAT Gateway in another Availability Zone. How should the Transit Gateway and VPC routing be configured?

    Answer options:

    A.

    Configure the Transit Gateway route table to failover to the secondary AZ.

    B.

    Configure the VPC route table to point to a Network Load Balancer (NLB) in front of the NAT Gateways.

    C.

    This is not natively possible; Transit Gateway routes traffic to the NAT Gateway in the same AZ. High availability requires a NAT Gateway in each AZ.

    D.

    Use AWS Global Accelerator to route traffic to the healthy NAT Gateway.

    How to approach this question

    Understand Transit Gateway AZ affinity.

    Full Answer

    C.This is not natively possible; Transit Gateway routes traffic to the NAT Gateway in the same AZ. High availability requires a NAT Gateway in each AZ.✓ Correct
    AWS Transit Gateway maintains Availability Zone affinity. Traffic originating from AZ-A in a spoke VPC will be routed to the ENI in AZ-A of the central Egress VPC. Therefore, you must deploy a NAT Gateway in every AZ to ensure high availability; you cannot natively failover cross-AZ within the TGW routing.

    Common mistakes

    Assuming TGW can do health-check based failover between AZs.
    Question 73All questionsQuestion 75

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 4

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A global enterprise is redesigning its network architecture across 50 AWS accounts. They require ...HardQ02A financial services company uses AWS Organizations to manage 100+ accounts. The security team ma...MediumQ03An e-commerce company requires a multi-region active-active architecture for its critical order p...MediumQ04A company is setting up a new AWS environment using AWS Control Tower. They need to ensure that a...HardQ05An enterprise has 50 AWS accounts under AWS Organizations. They want to implement a chargeback mo...Medium
    View all 75 questions →