ANS-C01 · Question #145
A company is moving its record-keeping application to the AWS Cloud. All traffic between the company's on-premises data center and AWS must be encrypted at all times and at every transit device during
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #145. The question stem and answer options stay visible for context.
Question
A company is moving its record-keeping application to the AWS Cloud. All traffic between the company's on-premises data center and AWS must be encrypted at all times and at every transit device during the migration. The application will reside across multiple Availability Zones in a single AWS Region. The application will use existing 10 Gbps AWS Direct Connect dedicated connections with a MACsec capable port. A network engineer must ensure that the Direct Connect connection is secured accordingly at every transit device. The network engineer creates a Connection Key Name and Connectivity Association Key (CKN/CAK) pair for the MACsec secret key. Which combination of additional steps should the network engineer take to meet the requirements? (Choose two.)
Options
- AConfigure the on-premises router with the MACsec secret key.
- BUpdate the connection's MACsec encryption mode to must_encrypt. Then associate the
- CUpdate the connection's MACsec encryption mode to should encrypt. Then associate the
- DAssociate the CKN/CAK pair with the connection. Then update the connection's MACsec
- EAssociate the CKN/CAK pair with the connection. Then update the connection's MACsec
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.