MENU
A company wants to establish a dedicated connection between its on-premises infrastructure and AWS. The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC. The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.
The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.
Which combination of steps will meet these requirements? (Select TWO.)
Suggested Answer: B, C
Get Premium SAP-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
To connect VPC resources over a transit Virtual Interface (VIF) using a Direct Connect connection, the company should advertise the on-premises network prefixes over the transit VIF and advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the same VIF. This configuration ensures seamless connectivity between the on-premises infrastructure and the AWS VPCs through the transit gateway, facilitating efficient and secure communication across the network.
48 comments · newest first
KR
Kristeen
11 months ago
Not sure about the MACsec encryption part, is it really required?
RA
Raina
11 months ago
Associating a MACsec CKN/CAK is a good move for security!
DA
Daron
11 months ago
Wait, do we really need to update to 10 Gbps? Seems unnecessary.
LO
Lottie
11 months ago
Totally agree, that's essential for connectivity!
AL
Alonzo
12 months ago
Gotta advertise the on-premises network prefixes over the transit VIF.
ME
Merilyn
12 months ago
I vaguely recall that MACsec is important for security, but I'm not confident if option E is a required step in this scenario.
LE
Lelia
1 year ago
I practiced a similar question where we had to set up a Direct Connect connection, and I think updating the encryption mode might not be necessary here, so I'm leaning away from option D.
EL
Elza
1 year ago
I'm not entirely sure, but I feel like option C could be relevant since it mentions VPC prefixes and the Direct Connect gateway.
CH
Charlette
1 year ago
I remember something about advertising prefixes, so I think option B might be correct.
MA
Marvel
1 year ago
Updating the Direct Connect connection to 10 Gbps and setting the MACsec encryption mode to "must encrypt" don't seem directly relevant to the requirements, so I'm not sure those are the right choices.
DA
Dawne
1 year ago
Based on the information provided, I think the key steps are to advertise the on-premises network prefixes over the transit VIF and associate the Direct Connect connection with a MACsec CKN/CAK pair.
MO
Mose
1 year ago
I'm a bit confused about the transit gateway and Direct Connect gateway. Do we need to configure both of those to meet the requirements?
AM
Amira
1 year ago
This question seems straightforward, but I want to make sure I understand the requirements correctly before selecting my answers.
SO
Sophia
1 year ago
Okay, let's think this through step-by-step. We need to connect the on-premises infrastructure to the VPC resources over the transit VIF using the Direct Connect connection.
IS
Isadora
1 year ago
This is a tricky one. I'll need to carefully review the details about the data breach and the relevant privacy laws in Hong Kong to determine the best course of action.
BU
Burma
1 year ago
I'm not sure about the difference between "zfs send -i" and "zfs send" commands. I'll need to double-check the syntax to make sure I'm selecting the correct option.
EL
Elli
1 year ago
Hmm, I'm a bit unsure here. I know we need to consider the risk, but I'm not sure if impact to the enterprise is the only factor. Maybe the criticality of the affected IT services is also important? I'll have to think this through carefully.
AL
Alesia
1 year ago
I remember practicing a similar question, and I think automated scaling was a key term in those. I think I'll go with B as well.
LY
Lyndia
2 years ago
I believe so. It's necessary for the architecture setup.
PA
Paris
2 years ago
Do we also need to associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection?
BO
Bok
2 years ago
Yes, that's correct. It's one of the steps to meet the requirements.
TA
Tamala
2 years ago
We also need to advertise the on-premises network prefixes over the transit VIF, right?
LY
Lyndia
2 years ago
I agree with Bok. That will help meet the requirements.
BO
Bok
2 years ago
I think we need to update the Direct Connect connection to 10 Gbps.
CH
Christiane
2 years ago
And we should associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection for added security.
MI
Micaela
2 years ago
Yes, that way we can connect our on-premises infrastructure to the VPC resources.
CO
Colene
2 years ago
We also need to advertise the on-premises network prefixes over the transit VIF.
CH
Christiane
2 years ago
I agree, that would help ensure we have enough bandwidth for our needs.
MI
Micaela
2 years ago
I think we need to update the Direct Connect connection to 10 Gbps.
BA
Bambi
3 years ago
Wait, why E? Associating a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection? That sounds like overkill to me.
ST
Stefania
3 years ago
Hold up, what's this 'adverse the VPC prefixes' thing? I think you mean 'advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF', which is option C.
CA
Caitlin
3 years ago
Hmm, I'm not sure about updating the 1 Gbps Direct Connect connection to 10 Gbps. That seems like overkill unless we're really pushing a ton of traffic. Let's stick to the minimum requirements for now.
DO
Dorsey
3 years ago
Hmm, I'm not so sure about C. Wouldn't that be more for establishing a connection from the on-premises network to the VPC, rather than the other way around? I'd probably lean more towards B and E.
IL
Iluminada
3 years ago
You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E. That will provide the necessary encryption for the connection.
TH
Theron
2 years ago
You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E.
EL
Elin
3 years ago
E: Associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
LU
Lucy
3 years ago
D: Update the Direct Connect connection's MACsec encryption mode attribute to must encrypt.
VI
Vilma
3 years ago
C: Adverse the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
EA
Earnestine
3 years ago
B: Advertise the on-premises network prefixes over the transit VIF.
TR
Tran
3 years ago
A: Update the 1 Gbps Direct Connect connection to 10 Gbps.
EL
Ellsworth
3 years ago
This question is tricky, but I think I have an idea of what's required. We need to connect the on-premises infrastructure to the VPC resources through the transit VIF, right? So, we'll need to advertise the on-premises network prefixes over the transit VIF, which is option B.
DO
Donette
3 years ago
Definitely B and C. Advertising the on-premises network prefixes over the transit VIF and advertising the VPC prefixes from the Direct Connect gateway to the on-premises network makes the most sense to me.
LO
Lou
3 years ago
That's a good point. Encrypting the connection might not be necessary, especially if the cost of upgrading to 10 Gbps is a concern. I'd probably go with B and C as the best options.
AN
Anglea
2 years ago
Agreed, and we should also advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
SH
Shawnee
2 years ago
I think we should just advertise the on-premises network prefixes over the transit VIF.
CH
Chan
2 years ago
I agree, upgrading to 10 Gbps might be expensive.
RA
Rachael
3 years ago
I agree. The question is pretty clear, but I'm not sure about the MACsec encryption part. Do we really need to encrypt the connection if it's just between our on-premises and the VPC?
CA
Cassie
3 years ago
This question seems straightforward, but I'm curious to hear what everyone else thinks. The key seems to be establishing the connection between the on-premises infrastructure and the VPC resources using the transit VIF.