Amazon ANS-C01 Exam - Topic 1 Question 54 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 54
Topic #: 1

A company is growing rapidly. Data transfers between the company's on-premises systems and Amazon EC2 instances that run in VPCs are limited by the throughput of a single AWS Site-to-Site VPN connection between the company's on-premises data center firewall and an AWS Transit Gateway.

A network engineer must resolve the throttling by designing a solution that is highly available and secure. The solution also must scale the VPN throughput from on premises to the VPC resources to support the increase in traffic.

Which solution will meet these requirements?

AConfigure multiple dynamic BGP-based Site-to-Site VPN connections to the transit gateway Configure equal-cost multi-path routing

BConfigure multiple static routing-based Site-to-Site VPN connections to the transit gateway. Configure equal-cost multi-path routing

CConfigure a new Site-to-Site VPN connection to the transit gateway Enable acceleration for the Site-to-Site VPN connection.

DConfigure a software appliance-based VPN connection over the internet from the on-premises firewall to an EC2 instance that has a large instance size and networking capabilities.

Show Suggested Answer

Suggested Answer: A

by Veronika at Aug 03, 2025, 08:12 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gretchen

2 months ago

Wait, can multiple VPNs really boost throughput like that?

upvoted 0 times

...

Avery

3 months ago

D sounds risky, not sure about using the internet for that.

upvoted 0 times

...

Latrice

3 months ago

I think B is better for static routes, right?

upvoted 0 times

...

Blondell

3 months ago

A is definitely the way to go for scalability!

upvoted 0 times

...

Ellsworth

4 months ago

Option A seems solid with BGP and multi-path routing.

upvoted 0 times

...

Barbra

4 months ago

I remember discussing software appliances in class, but I'm not sure if using an EC2 instance for the VPN is the most secure option.

upvoted 0 times

...

Felicidad

4 months ago

I feel like option C could be a good choice since it mentions enabling acceleration, but I'm not entirely confident about how that impacts throughput.

upvoted 0 times

...

Lennie

4 months ago

I think I practiced a similar question where multiple VPN connections were involved. Equal-cost multi-path routing sounds familiar, but I can't recall the exact details.

upvoted 0 times

...

Margurite

5 months ago

I remember studying about BGP and how it can help with dynamic routing, but I'm not sure if it's the best choice for this scenario.

upvoted 0 times

...

Bo

5 months ago

This is a tricky one. I'm not sure if the software appliance-based VPN connection over the internet is the best approach, as it might introduce additional latency and security concerns. I'll need to carefully consider the trade-offs before making a decision.

upvoted 0 times

...

Catina

5 months ago

The requirement to scale the VPN throughput is the most important part here. I think option A, with the multiple dynamic BGP-based VPN connections, is the way to go. That should provide the flexibility and redundancy to handle the increasing traffic.

upvoted 0 times

...

Rasheeda

5 months ago

Hmm, I'm a bit confused by the different options. I'm not sure if I fully understand the differences between dynamic BGP-based and static routing-based VPN connections. I'll need to review those concepts before deciding on the best solution.

upvoted 0 times

...

Veronika

5 months ago

This looks like a classic networking question. I think the key is to focus on the requirements of high availability and scalability. Configuring multiple dynamic BGP-based VPN connections to the transit gateway with equal-cost multi-path routing seems like the best approach to meet those needs.

upvoted 0 times

...

Latonia

6 months ago

But option A provides high availability and scalability.

upvoted 0 times

...

Johana

6 months ago

Option D with a software appliance-based VPN connection over the internet? That's like trying to put a band-aid on a bullet wound. Not the most secure or reliable solution in my opinion.

upvoted 0 times

Ulysses

2 months ago

B could work too, but A has that scalability edge.

upvoted 0 times

...

Cammy

3 months ago

I think A is the best choice. More reliable.

upvoted 0 times

...

Kimberely

3 months ago

Definitely! Security should be a priority.

upvoted 0 times

...

Corrie

4 months ago

I agree, Option D seems risky.

upvoted 0 times

...

Anastacia

7 months ago

I disagree, I believe option D is more secure.

upvoted 0 times

...

Aaron

7 months ago

Hmm, Option C might be the easiest to implement, but I'm not sure if enabling acceleration will be enough to handle the increased traffic.

upvoted 0 times

Reyes

6 months ago

User 1: Option A seems like the best choice. Multiple dynamic BGP-based connections can handle the increased traffic.

upvoted 0 times

...

Herschel

7 months ago

I like the sound of Option B. Multiple static routing-based VPN connections with ECMP routing could be a simpler and more reliable solution.

upvoted 0 times

...

Sophia

7 months ago

Option A seems like the way to go. Configuring multiple dynamic BGP-based VPN connections to the transit gateway and enabling ECMP routing should provide the high availability and scalability we need.

upvoted 0 times