nerdexam
Amazon

ANS-C01 · Question #134

A network engineer needs to build an encrypted connection between an on-premises data center and a VPC. The network engineer attaches the VPC to a virtual private gateway and sets up an AWS…

The correct answer is D. Check Amazon CloudWatch logs of the customer gateway. Restrict the VPN tunnel options to the. Site-to-Site VPN logs can be published to Amazon CloudWatch Logs. This feature provides customers with a single consistent way to access and analyze detailed logs for all of their Site-to- Site VPN connections.

Submitted by satoshi_tk· Mar 6, 2026Manage and operate network solutions

Question

A network engineer needs to build an encrypted connection between an on-premises data center and a VPC. The network engineer attaches the VPC to a virtual private gateway and sets up an AWS Site-to-Site VPN connection. The VPN tunnel is UP after configuration and is working. However, during rekey for phase 2 of the VPN negotiation, the customer gateway device is receiving different parameters than the parameters that the device is configured to support. The network engineer checks the IPsec configuration of the VPN tunnel. The network engineer notices that the customer gateway device is configured with the most secure encryption algorithms that the AWS Site-to-Site VPN configuration file provides. What should the network engineer do to troubleshoot and correct the issue?

Options

  • ACheck the native virtual private gateway logs. Restrict the VPN tunnel options to the specific VPN
  • BCheck the native customer gateway logs. Restrict the VPN tunnel options to the specific VPN
  • CCheck Amazon CloudWatch logs of the virtual private gateway. Restrict the VPN tunnel options to
  • DCheck Amazon CloudWatch logs of the customer gateway. Restrict the VPN tunnel options to the

How the community answered

(48 responses)
  • A
    10% (5)
  • B
    17% (8)
  • C
    4% (2)
  • D
    69% (33)

Explanation

Site-to-Site VPN logs can be published to Amazon CloudWatch Logs. This feature provides customers with a single consistent way to access and analyze detailed logs for all of their Site-to- Site VPN connections.

Topics

#AWS Site-to-Site VPN#VPN troubleshooting#IPsec rekey#Customer Gateway device

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ANS-C01 Practice