Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon ANS-C01 Exam - Topic 3 Question 32 Discussion

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud.Which solution will meet these requirements while providing the HIGHEST throughput?
C) Configure MACsec for the Direct Connect connection. Configure a transit VIF to a Direct Connect gateway that is associated with the transit gateway.
A) Configure a public VIF on the Direct Connect connection. Configure an AWS Site-to-Site VPN connection to the transit gateway as a VPN attachment.
B) Configure a transit VIF on the Direct Connect connection. Configure an IPsec VPN connection to an EC2 instance that is running third-party VPN software.
D) Configure a public VIF on the Direct Connect connection. Configure two AWS Site-to-Site VPN connections to the transit gateway. Enable equal-cost multi-path (ECMP) routing.

Amazon ANS-C01 Exam - Topic 3 Question 32 Discussion

Actual exam question for Amazon's ANS-C01 exam
Question #: 32
Topic #: 3
[All ANS-C01 Questions]

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud.

Which solution will meet these requirements while providing the HIGHEST throughput?

Show Suggested Answer Hide Answer
Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.


by Pok at Jul 17, 2024, 08:15 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Francine
9 months ago
Not sure about that, B could introduce bottlenecks.
upvoted 0 times
...
Taryn
9 months ago
Definitely leaning towards C, it covers all bases.
upvoted 0 times
...
Matilda
10 months ago
Surprised that people are considering public VIFs for this.
upvoted 0 times
...
Alyssa
10 months ago
I think B is a better choice for higher throughput!
upvoted 0 times
...
Art
10 months ago
Option C seems solid with MACsec for encryption.
upvoted 0 times
...
Emerson
10 months ago
I’m leaning towards option B because it mentions IPsec, which I know is important for encryption, but I’m not confident about the third-party VPN software part.
upvoted 0 times
...
Winfred
11 months ago
I practiced a similar question about Direct Connect and VPNs, and I feel like the public VIF options might not be as secure as the transit VIF.
upvoted 0 times
...
Katie
11 months ago
I think option C might be the right answer since MACsec provides encryption and could handle the throughput requirements, but I need to double-check the details.
upvoted 0 times
...
Arlyne
11 months ago
I remember that using a transit VIF is generally recommended for higher throughput, but I'm not sure if it's the best choice here.
upvoted 0 times
...
Buddy
11 months ago
I feel pretty confident that option C is the way to go here. The combination of MACsec and the Direct Connect gateway should meet all the requirements.
upvoted 0 times
...
Werner
11 months ago
I'm a bit confused by the different VIF and VPN options. I'll need to review the details of each to determine the optimal solution.
upvoted 0 times
...
Salome
11 months ago
Hmm, the mention of a 10 Gbps Direct Connect connection makes me think option C might be the best choice for high throughput.
upvoted 0 times
...
Roxane
11 months ago
This looks like a tricky one. I'll need to carefully consider the requirements around encryption and throughput.
upvoted 0 times
...
Deangelo
11 months ago
Option D seems promising with the ECMP routing, but I'm not sure if that would provide the highest throughput compared to the other choices.
upvoted 0 times
...
Eladia
11 months ago
This looks like a straightforward question about hotel classification terms. I'm confident I can identify the common terms used across countries.
upvoted 0 times
...
Cherilyn
11 months ago
This is a tricky one, but I feel pretty confident about it. The portfolio manager is clearly trying to get the organization to focus on initiatives that support the overall strategy, so that points to the portfolio communications strategy being the key element here. I'll select option C.
upvoted 0 times
...
Glory
1 year ago
Ah, the classic 'highest throughput' question. I'd say Option C is the way to go - MACsec encryption and the Direct Connect gateway just sound like a perfect match.
upvoted 0 times
Shenika
1 year ago
Yeah, Option C with MACsec and Direct Connect gateway is the way to go for encrypted paths and high throughput.
upvoted 0 times
...
Arlie
1 year ago
I agree, MACsec encryption and Direct Connect gateway seem like a solid combination.
upvoted 0 times
...
Lucy
1 year ago
Option C is definitely the best choice for highest throughput.
upvoted 0 times
...
...
Pamella
1 year ago
Hmm, Option A looks a bit outdated. Public VIFs and Site-to-Site VPNs don't scream 'highest throughput' to me.
upvoted 0 times
Carmela
1 year ago
Yeah, Option C definitely seems like the way to go for the migration plan.
upvoted 0 times
...
Verona
1 year ago
I agree, Option C sounds like the most efficient solution for encrypted paths and high throughput.
upvoted 0 times
...
Edison
1 year ago
Option C seems like the best choice. MACsec for encryption and a transit VIF for high throughput.
upvoted 0 times
...
...
Timothy
1 year ago
As a network engineer, I'd go with Option B. Leveraging a third-party VPN solution on an EC2 instance gives me more control and flexibility over the encryption implementation.
upvoted 0 times
...
Desirae
1 year ago
I'm leaning towards Option D. Dual VPN connections with ECMP routing could offer excellent failover and potentially higher throughput than a single VPN connection.
upvoted 0 times
Kattie
1 year ago
Option A could work too, but I think Option D might provide higher throughput with ECMP routing.
upvoted 0 times
...
Almeta
1 year ago
But what about Option A with a public VIF and AWS Site-to-Site VPN?
upvoted 0 times
...
Alline
1 year ago
I agree, having two VPN connections with ECMP routing could be beneficial.
upvoted 0 times
...
Beckie
1 year ago
Option D sounds like a good choice for redundancy and potential throughput.
upvoted 0 times
...
...
Tyra
1 year ago
That's a good point, Rosio. Option D does offer a way to increase throughput with ECMP routing. It's definitely worth considering for the migration.
upvoted 0 times
...
Carrol
1 year ago
Option C seems the most robust solution, providing encryption at the data link layer with MACsec. Plus, the Direct Connect gateway connectivity to the transit gateway should offer great throughput.
upvoted 0 times
Chaya
1 year ago
I agree, using MACsec for encryption and connecting to the transit gateway through the Direct Connect gateway should provide the performance needed for critical workloads.
upvoted 0 times
...
Maryann
1 year ago
Option C seems like the best choice for ensuring encrypted paths and high throughput.
upvoted 0 times
...
...
Rosio
1 year ago
I disagree, I believe option D is the better solution. By configuring two AWS Site-to-Site VPN connections with ECMP routing, we can achieve higher throughput for the migration.
upvoted 0 times
...
Tyra
1 year ago
I think option A is the best choice because it involves setting up a public VIF on the Direct Connect connection and using an AWS Site-to-Site VPN connection for encryption.
upvoted 0 times
...

Save Cancel