Amazon Exam SAP-C02 Topic 7 Question 27 Discussion

Actual exam question for Amazon's SAP-C02 exam

Question #: 27
Topic #: 7

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS. The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC. The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.

The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.

Which combination of steps will meet these requirements? (Select TWO.)

AUpdate the 1 Gbps Direct Connect connection to 10 Gbps.

BAdvertise the on-premises network prefixes over the transit VIF.

CAdverse the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.

DUpdate the Direct Connect connection's MACsec encryption mode attribute to must encrypt.

EAssociate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.

Show Suggested Answer

Suggested Answer: B, C

To connect VPC resources over a transit Virtual Interface (VIF) using a Direct Connect connection, the company should advertise the on-premises network prefixes over the transit VIF and advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the same VIF. This configuration ensures seamless connectivity between the on-premises infrastructure and the AWS VPCs through the transit gateway, facilitating efficient and secure communication across the network.

by Rhea at Apr 13, 2024, 01:34 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bambi

7 days ago

Wait, why E? Associating a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection? That sounds like overkill to me.

upvoted 0 times

...

Stefania

7 days ago

Hold up, what's this 'adverse the VPC prefixes' thing? I think you mean 'advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF', which is option C.

upvoted 0 times

...

Caitlin

8 days ago

Hmm, I'm not sure about updating the 1 Gbps Direct Connect connection to 10 Gbps. That seems like overkill unless we're really pushing a ton of traffic. Let's stick to the minimum requirements for now.

upvoted 0 times

...

Dorsey

9 days ago

Hmm, I'm not so sure about C. Wouldn't that be more for establishing a connection from the on-premises network to the VPC, rather than the other way around? I'd probably lean more towards B and E.

upvoted 0 times

...

Iluminada

9 days ago

You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E. That will provide the necessary encryption for the connection.

upvoted 0 times

...

Ellsworth

10 days ago

This question is tricky, but I think I have an idea of what's required. We need to connect the on-premises infrastructure to the VPC resources through the transit VIF, right? So, we'll need to advertise the on-premises network prefixes over the transit VIF, which is option B.

upvoted 0 times

...

Donette

10 days ago

Definitely B and C. Advertising the on-premises network prefixes over the transit VIF and advertising the VPC prefixes from the Direct Connect gateway to the on-premises network makes the most sense to me.

upvoted 0 times

...

Lou

11 days ago

That's a good point. Encrypting the connection might not be necessary, especially if the cost of upgrading to 10 Gbps is a concern. I'd probably go with B and C as the best options.

upvoted 0 times

...

Rachael

13 days ago

I agree. The question is pretty clear, but I'm not sure about the MACsec encryption part. Do we really need to encrypt the connection if it's just between our on-premises and the VPC?

upvoted 0 times

...

Cassie

15 days ago

This question seems straightforward, but I'm curious to hear what everyone else thinks. The key seems to be establishing the connection between the on-premises infrastructure and the VPC resources using the transit VIF.

upvoted 0 times

...