Amazon ANS-C01 Exam - Topic 3 Question 32 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 32
Topic #: 3

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud.

Which solution will meet these requirements while providing the HIGHEST throughput?

AConfigure a public VIF on the Direct Connect connection. Configure an AWS Site-to-Site VPN connection to the transit gateway as a VPN attachment.

BConfigure a transit VIF on the Direct Connect connection. Configure an IPsec VPN connection to an EC2 instance that is running third-party VPN software.

CConfigure MACsec for the Direct Connect connection. Configure a transit VIF to a Direct Connect gateway that is associated with the transit gateway.

DConfigure a public VIF on the Direct Connect connection. Configure two AWS Site-to-Site VPN connections to the transit gateway. Enable equal-cost multi-path (ECMP) routing.

Show Suggested Answer

Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.

by Pok at Jul 17, 2024, 08:15 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Francine

5 months ago

Not sure about that, B could introduce bottlenecks.

upvoted 0 times

...

Taryn

5 months ago

Definitely leaning towards C, it covers all bases.

upvoted 0 times

...

Matilda

5 months ago

Surprised that people are considering public VIFs for this.

upvoted 0 times

...

Alyssa

5 months ago

I think B is a better choice for higher throughput!

upvoted 0 times

...

Art

6 months ago

Option C seems solid with MACsec for encryption.

upvoted 0 times

...

Emerson

6 months ago

I’m leaning towards option B because it mentions IPsec, which I know is important for encryption, but I’m not confident about the third-party VPN software part.

upvoted 0 times

...

Winfred

6 months ago

I practiced a similar question about Direct Connect and VPNs, and I feel like the public VIF options might not be as secure as the transit VIF.

upvoted 0 times

...

Katie

6 months ago

I think option C might be the right answer since MACsec provides encryption and could handle the throughput requirements, but I need to double-check the details.

upvoted 0 times

...

Arlyne

6 months ago

I remember that using a transit VIF is generally recommended for higher throughput, but I'm not sure if it's the best choice here.

upvoted 0 times

...

Buddy

6 months ago

I feel pretty confident that option C is the way to go here. The combination of MACsec and the Direct Connect gateway should meet all the requirements.

upvoted 0 times

...

Werner

6 months ago

I'm a bit confused by the different VIF and VPN options. I'll need to review the details of each to determine the optimal solution.

upvoted 0 times

...

Salome

6 months ago

Hmm, the mention of a 10 Gbps Direct Connect connection makes me think option C might be the best choice for high throughput.

upvoted 0 times

...

Roxane

6 months ago

This looks like a tricky one. I'll need to carefully consider the requirements around encryption and throughput.

upvoted 0 times

...

Deangelo

7 months ago

Option D seems promising with the ECMP routing, but I'm not sure if that would provide the highest throughput compared to the other choices.

upvoted 0 times

...

Eladia

7 months ago

This looks like a straightforward question about hotel classification terms. I'm confident I can identify the common terms used across countries.

upvoted 0 times

...

Cherilyn

7 months ago

This is a tricky one, but I feel pretty confident about it. The portfolio manager is clearly trying to get the organization to focus on initiatives that support the overall strategy, so that points to the portfolio communications strategy being the key element here. I'll select option C.

upvoted 0 times

...

Glory

12 months ago

Ah, the classic 'highest throughput' question. I'd say Option C is the way to go - MACsec encryption and the Direct Connect gateway just sound like a perfect match.

upvoted 0 times

Shenika

11 months ago

Yeah, Option C with MACsec and Direct Connect gateway is the way to go for encrypted paths and high throughput.

upvoted 0 times

...

Arlie

11 months ago

I agree, MACsec encryption and Direct Connect gateway seem like a solid combination.

upvoted 0 times

...

Lucy

11 months ago

Option C is definitely the best choice for highest throughput.

upvoted 0 times

...

Pamella

12 months ago

Hmm, Option A looks a bit outdated. Public VIFs and Site-to-Site VPNs don't scream 'highest throughput' to me.

upvoted 0 times

Carmela

11 months ago

Yeah, Option C definitely seems like the way to go for the migration plan.

upvoted 0 times

...

Verona

11 months ago

I agree, Option C sounds like the most efficient solution for encrypted paths and high throughput.

upvoted 0 times

...

Edison

11 months ago

Option C seems like the best choice. MACsec for encryption and a transit VIF for high throughput.

upvoted 0 times

...

Timothy

12 months ago

As a network engineer, I'd go with Option B. Leveraging a third-party VPN solution on an EC2 instance gives me more control and flexibility over the encryption implementation.

upvoted 0 times

...

Desirae

1 year ago

I'm leaning towards Option D. Dual VPN connections with ECMP routing could offer excellent failover and potentially higher throughput than a single VPN connection.

upvoted 0 times

Kattie

10 months ago

Option A could work too, but I think Option D might provide higher throughput with ECMP routing.

upvoted 0 times

...

Almeta

10 months ago

But what about Option A with a public VIF and AWS Site-to-Site VPN?

upvoted 0 times

...

Alline

10 months ago

I agree, having two VPN connections with ECMP routing could be beneficial.

upvoted 0 times

...

Beckie

11 months ago

Option D sounds like a good choice for redundancy and potential throughput.

upvoted 0 times

...

Tyra

1 year ago

That's a good point, Rosio. Option D does offer a way to increase throughput with ECMP routing. It's definitely worth considering for the migration.

upvoted 0 times

...

Carrol

1 year ago

Option C seems the most robust solution, providing encryption at the data link layer with MACsec. Plus, the Direct Connect gateway connectivity to the transit gateway should offer great throughput.

upvoted 0 times

Chaya

11 months ago

I agree, using MACsec for encryption and connecting to the transit gateway through the Direct Connect gateway should provide the performance needed for critical workloads.

upvoted 0 times

...

Maryann

11 months ago

Option C seems like the best choice for ensuring encrypted paths and high throughput.

upvoted 0 times

...

Rosio

1 year ago

I disagree, I believe option D is the better solution. By configuring two AWS Site-to-Site VPN connections with ECMP routing, we can achieve higher throughput for the migration.

upvoted 0 times

...

Tyra

1 year ago

I think option A is the best choice because it involves setting up a public VIF on the Direct Connect connection and using an AWS Site-to-Site VPN connection for encryption.

upvoted 0 times

...