New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon SAP-C02 Exam - Topic 7 Question 27 Discussion

Actual exam question for Amazon's SAP-C02 exam
Question #: 27
Topic #: 7
[All SAP-C02 Questions]

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS. The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC. The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.

The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.

Which combination of steps will meet these requirements? (Select TWO.)

Show Suggested Answer Hide Answer
Suggested Answer: B, C

To connect VPC resources over a transit Virtual Interface (VIF) using a Direct Connect connection, the company should advertise the on-premises network prefixes over the transit VIF and advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the same VIF. This configuration ensures seamless connectivity between the on-premises infrastructure and the AWS VPCs through the transit gateway, facilitating efficient and secure communication across the network.


by Rhea at Apr 13, 2024, 01:34 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Kristeen
3 months ago
Not sure about the MACsec encryption part, is it really required?
upvoted 0 times
...
Raina
3 months ago
Associating a MACsec CKN/CAK is a good move for security!
upvoted 0 times
...
Daron
3 months ago
Wait, do we really need to update to 10 Gbps? Seems unnecessary.
upvoted 0 times
...
Lottie
4 months ago
Totally agree, that's essential for connectivity!
upvoted 0 times
...
Alonzo
4 months ago
Gotta advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Merilyn
4 months ago
I vaguely recall that MACsec is important for security, but I'm not confident if option E is a required step in this scenario.
upvoted 0 times
...
Lelia
4 months ago
I practiced a similar question where we had to set up a Direct Connect connection, and I think updating the encryption mode might not be necessary here, so I'm leaning away from option D.
upvoted 0 times
...
Elza
4 months ago
I'm not entirely sure, but I feel like option C could be relevant since it mentions VPC prefixes and the Direct Connect gateway.
upvoted 0 times
...
Charlette
5 months ago
I remember something about advertising prefixes, so I think option B might be correct.
upvoted 0 times
...
Marvel
5 months ago
Updating the Direct Connect connection to 10 Gbps and setting the MACsec encryption mode to "must encrypt" don't seem directly relevant to the requirements, so I'm not sure those are the right choices.
upvoted 0 times
...
Dawne
5 months ago
Based on the information provided, I think the key steps are to advertise the on-premises network prefixes over the transit VIF and associate the Direct Connect connection with a MACsec CKN/CAK pair.
upvoted 0 times
...
Mose
5 months ago
I'm a bit confused about the transit gateway and Direct Connect gateway. Do we need to configure both of those to meet the requirements?
upvoted 0 times
...
Amira
5 months ago
This question seems straightforward, but I want to make sure I understand the requirements correctly before selecting my answers.
upvoted 0 times
...
Sophia
5 months ago
Okay, let's think this through step-by-step. We need to connect the on-premises infrastructure to the VPC resources over the transit VIF using the Direct Connect connection.
upvoted 0 times
...
Isadora
5 months ago
This is a tricky one. I'll need to carefully review the details about the data breach and the relevant privacy laws in Hong Kong to determine the best course of action.
upvoted 0 times
...
Burma
5 months ago
I'm not sure about the difference between "zfs send -i" and "zfs send" commands. I'll need to double-check the syntax to make sure I'm selecting the correct option.
upvoted 0 times
...
Elli
5 months ago
Hmm, I'm a bit unsure here. I know we need to consider the risk, but I'm not sure if impact to the enterprise is the only factor. Maybe the criticality of the affected IT services is also important? I'll have to think this through carefully.
upvoted 0 times
...
Alesia
5 months ago
I remember practicing a similar question, and I think automated scaling was a key term in those. I think I'll go with B as well.
upvoted 0 times
...
Lyndia
2 years ago
I believe so. It's necessary for the architecture setup.
upvoted 0 times
...
Paris
2 years ago
Do we also need to associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection?
upvoted 0 times
...
Bok
2 years ago
Yes, that's correct. It's one of the steps to meet the requirements.
upvoted 0 times
...
Tamala
2 years ago
We also need to advertise the on-premises network prefixes over the transit VIF, right?
upvoted 0 times
...
Lyndia
2 years ago
I agree with Bok. That will help meet the requirements.
upvoted 0 times
...
Bok
2 years ago
I think we need to update the Direct Connect connection to 10 Gbps.
upvoted 0 times
...
Christiane
2 years ago
And we should associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection for added security.
upvoted 0 times
...
Micaela
2 years ago
Yes, that way we can connect our on-premises infrastructure to the VPC resources.
upvoted 0 times
...
Colene
2 years ago
We also need to advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Christiane
2 years ago
I agree, that would help ensure we have enough bandwidth for our needs.
upvoted 0 times
...
Micaela
2 years ago
I think we need to update the Direct Connect connection to 10 Gbps.
upvoted 0 times
...
Bambi
2 years ago
Wait, why E? Associating a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection? That sounds like overkill to me.
upvoted 0 times
...
Stefania
2 years ago
Hold up, what's this 'adverse the VPC prefixes' thing? I think you mean 'advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF', which is option C.
upvoted 0 times
...
Caitlin
2 years ago
Hmm, I'm not sure about updating the 1 Gbps Direct Connect connection to 10 Gbps. That seems like overkill unless we're really pushing a ton of traffic. Let's stick to the minimum requirements for now.
upvoted 0 times
...
Dorsey
2 years ago
Hmm, I'm not so sure about C. Wouldn't that be more for establishing a connection from the on-premises network to the VPC, rather than the other way around? I'd probably lean more towards B and E.
upvoted 0 times
...
Iluminada
2 years ago
You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E. That will provide the necessary encryption for the connection.
upvoted 0 times
Theron
2 years ago
You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E.
upvoted 0 times
...
Elin
2 years ago
E: Associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
upvoted 0 times
...
Lucy
2 years ago
D: Update the Direct Connect connection's MACsec encryption mode attribute to must encrypt.
upvoted 0 times
...
Vilma
2 years ago
C: Adverse the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
upvoted 0 times
...
Earnestine
2 years ago
B: Advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Tran
2 years ago
A: Update the 1 Gbps Direct Connect connection to 10 Gbps.
upvoted 0 times
...
...
Ellsworth
2 years ago
This question is tricky, but I think I have an idea of what's required. We need to connect the on-premises infrastructure to the VPC resources through the transit VIF, right? So, we'll need to advertise the on-premises network prefixes over the transit VIF, which is option B.
upvoted 0 times
...
Donette
2 years ago
Definitely B and C. Advertising the on-premises network prefixes over the transit VIF and advertising the VPC prefixes from the Direct Connect gateway to the on-premises network makes the most sense to me.
upvoted 0 times
...
Lou
2 years ago
That's a good point. Encrypting the connection might not be necessary, especially if the cost of upgrading to 10 Gbps is a concern. I'd probably go with B and C as the best options.
upvoted 0 times
Anglea
2 years ago
Agreed, and we should also advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
upvoted 0 times
...
Shawnee
2 years ago
I think we should just advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Chan
2 years ago
I agree, upgrading to 10 Gbps might be expensive.
upvoted 0 times
...
...
Rachael
2 years ago
I agree. The question is pretty clear, but I'm not sure about the MACsec encryption part. Do we really need to encrypt the connection if it's just between our on-premises and the VPC?
upvoted 0 times
...
Cassie
2 years ago
This question seems straightforward, but I'm curious to hear what everyone else thinks. The key seems to be establishing the connection between the on-premises infrastructure and the VPC resources using the transit VIF.
upvoted 0 times
...

Save Cancel