ANS-C01 · Question #131
A company uses an AWS Direct Connect private VIF with a link aggregation group (LAG) that consists of two 10 Gbps connections. The company's security team has implemented a new requirement for…
The correct answer is A. Create a new Direct Connect LAG with new circuits and ports that support MACsec. B. Associate the MACsec Connectivity Association Key (CAK) and the Connection Key Name (CKN) E. Configure the MACsec encryption mode on the new LAG. To start using MACsec, you must turn the feature on when you create a dedicated connection https://docs.aws.amazon.com/directconnect/latest/UserGuide/create-lag.html https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-mac-sec-getting…
Question
A company uses an AWS Direct Connect private VIF with a link aggregation group (LAG) that consists of two 10 Gbps connections. The company's security team has implemented a new requirement for external network connections to provide layer 2 encryption. The company's network team plans to use MACsec support for Direct Connect to meet the new requirement. Which combination of steps should the network team take to implement this functionality? (Choose three.)
Options
- ACreate a new Direct Connect LAG with new circuits and ports that support MACsec.
- BAssociate the MACsec Connectivity Association Key (CAK) and the Connection Key Name (CKN)
- CAssociate the Internet Key Exchange (IKE) with the existing LAG.
- DConfigure the MACsec encryption mode on the existing LAG.
- EConfigure the MACsec encryption mode on the new LAG.
- FConfigure the MACsec encryption mode on each Direct Connect connection that makes up the
How the community answered
(57 responses)- A60% (34)
- C23% (13)
- D11% (6)
- F7% (4)
Explanation
To start using MACsec, you must turn the feature on when you create a dedicated connection https://docs.aws.amazon.com/directconnect/latest/UserGuide/create-lag.html https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-mac-sec-getting- https://docs.aws.amazon.com/directconnect/latest/UserGuide/associate-key-lag.html
Topics
Community Discussion
No community discussion yet for this question.