MENU
A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud.
Which solution will meet these requirements while providing the HIGHEST throughput?
Suggested Answer: C
Get Premium ANS-C01 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.
36 comments · newest first
FR
Francine
11 months ago
Not sure about that, B could introduce bottlenecks.
TA
Taryn
11 months ago
Definitely leaning towards C, it covers all bases.
MA
Matilda
11 months ago
Surprised that people are considering public VIFs for this.
AL
Alyssa
11 months ago
I think B is a better choice for higher throughput!
AR
Art
12 months ago
Option C seems solid with MACsec for encryption.
EM
Emerson
12 months ago
I’m leaning towards option B because it mentions IPsec, which I know is important for encryption, but I’m not confident about the third-party VPN software part.
WI
Winfred
1 year ago
I practiced a similar question about Direct Connect and VPNs, and I feel like the public VIF options might not be as secure as the transit VIF.
KA
Katie
1 year ago
I think option C might be the right answer since MACsec provides encryption and could handle the throughput requirements, but I need to double-check the details.
AR
Arlyne
1 year ago
I remember that using a transit VIF is generally recommended for higher throughput, but I'm not sure if it's the best choice here.
BU
Buddy
1 year ago
I feel pretty confident that option C is the way to go here. The combination of MACsec and the Direct Connect gateway should meet all the requirements.
WE
Werner
1 year ago
I'm a bit confused by the different VIF and VPN options. I'll need to review the details of each to determine the optimal solution.
SA
Salome
1 year ago
Hmm, the mention of a 10 Gbps Direct Connect connection makes me think option C might be the best choice for high throughput.
RO
Roxane
1 year ago
This looks like a tricky one. I'll need to carefully consider the requirements around encryption and throughput.
DE
Deangelo
1 year ago
Option D seems promising with the ECMP routing, but I'm not sure if that would provide the highest throughput compared to the other choices.
EL
Eladia
1 year ago
This looks like a straightforward question about hotel classification terms. I'm confident I can identify the common terms used across countries.
CH
Cherilyn
1 year ago
This is a tricky one, but I feel pretty confident about it. The portfolio manager is clearly trying to get the organization to focus on initiatives that support the overall strategy, so that points to the portfolio communications strategy being the key element here. I'll select option C.
GL
Glory
1 year ago
Ah, the classic 'highest throughput' question. I'd say Option C is the way to go - MACsec encryption and the Direct Connect gateway just sound like a perfect match.
SH
Shenika
1 year ago
Yeah, Option C with MACsec and Direct Connect gateway is the way to go for encrypted paths and high throughput.
AR
Arlie
1 year ago
I agree, MACsec encryption and Direct Connect gateway seem like a solid combination.
LU
Lucy
1 year ago
Option C is definitely the best choice for highest throughput.
PA
Pamella
1 year ago
Hmm, Option A looks a bit outdated. Public VIFs and Site-to-Site VPNs don't scream 'highest throughput' to me.
CA
Carmela
1 year ago
Yeah, Option C definitely seems like the way to go for the migration plan.
VE
Verona
1 year ago
I agree, Option C sounds like the most efficient solution for encrypted paths and high throughput.
ED
Edison
1 year ago
Option C seems like the best choice. MACsec for encryption and a transit VIF for high throughput.
TI
Timothy
1 year ago
As a network engineer, I'd go with Option B. Leveraging a third-party VPN solution on an EC2 instance gives me more control and flexibility over the encryption implementation.
DE
Desirae
2 years ago
I'm leaning towards Option D. Dual VPN connections with ECMP routing could offer excellent failover and potentially higher throughput than a single VPN connection.
KA
Kattie
1 year ago
Option A could work too, but I think Option D might provide higher throughput with ECMP routing.
AL
Almeta
1 year ago
But what about Option A with a public VIF and AWS Site-to-Site VPN?
AL
Alline
1 year ago
I agree, having two VPN connections with ECMP routing could be beneficial.
BE
Beckie
1 year ago
Option D sounds like a good choice for redundancy and potential throughput.
TY
Tyra
2 years ago
That's a good point, Rosio. Option D does offer a way to increase throughput with ECMP routing. It's definitely worth considering for the migration.
CA
Carrol
2 years ago
Option C seems the most robust solution, providing encryption at the data link layer with MACsec. Plus, the Direct Connect gateway connectivity to the transit gateway should offer great throughput.
CH
Chaya
1 year ago
I agree, using MACsec for encryption and connecting to the transit gateway through the Direct Connect gateway should provide the performance needed for critical workloads.
MA
Maryann
1 year ago
Option C seems like the best choice for ensuring encrypted paths and high throughput.
RO
Rosio
2 years ago
I disagree, I believe option D is the better solution. By configuring two AWS Site-to-Site VPN connections with ECMP routing, we can achieve higher throughput for the migration.
TY
Tyra
2 years ago
I think option A is the best choice because it involves setting up a public VIF on the Direct Connect connection and using an AWS Site-to-Site VPN connection for encryption.