Amazon Exam ANS-C01 Topic 3 Question 32 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 32
Topic #: 3

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud.

Which solution will meet these requirements while providing the HIGHEST throughput?

AConfigure a public VIF on the Direct Connect connection. Configure an AWS Site-to-Site VPN connection to the transit gateway as a VPN attachment.

BConfigure a transit VIF on the Direct Connect connection. Configure an IPsec VPN connection to an EC2 instance that is running third-party VPN software.

CConfigure MACsec for the Direct Connect connection. Configure a transit VIF to a Direct Connect gateway that is associated with the transit gateway.

DConfigure a public VIF on the Direct Connect connection. Configure two AWS Site-to-Site VPN connections to the transit gateway. Enable equal-cost multi-path (ECMP) routing.

Show Suggested Answer

Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.

by Pok at Jul 17, 2024, 08:15 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tyra

1 days ago

That's a good point, Rosio. Option D does offer a way to increase throughput with ECMP routing. It's definitely worth considering for the migration.

upvoted 0 times

...

Carrol

2 days ago

Option C seems the most robust solution, providing encryption at the data link layer with MACsec. Plus, the Direct Connect gateway connectivity to the transit gateway should offer great throughput.

upvoted 0 times

...

Rosio

6 days ago

I disagree, I believe option D is the better solution. By configuring two AWS Site-to-Site VPN connections with ECMP routing, we can achieve higher throughput for the migration.

upvoted 0 times

...

Tyra

12 days ago

I think option A is the best choice because it involves setting up a public VIF on the Direct Connect connection and using an AWS Site-to-Site VPN connection for encryption.

upvoted 0 times

...