nerdexam
Amazon

ANS-C01 · Question #18

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the…

The correct answer is C. Configure MACsec for the Direct Connect connection. Configure a transit VIF to a Direct Connect. https://aws.amazon.com/blogs/networking-and-content-delivery/adding-macsec-security-to-aws- direct-connect-connections/

Submitted by haruto_sh· Mar 6, 2026Security, Compliance, and Governance for AI Solutions

Question

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud. Which solution will meet these requirements while providing the HIGHEST throughput?

Options

  • AConfigure a public VIF on the Direct Connect connection. Configure an AWS Site-to-Site VPN
  • BConfigure a transit VIF on the Direct Connect connection. Configure an IPsec VPN connection to
  • CConfigure MACsec for the Direct Connect connection. Configure a transit VIF to a Direct Connect
  • DConfigure a public VIF on the Direct Connect connection. Configure two AWS Site-to-Site VPN

How the community answered

(41 responses)
  • A
    22% (9)
  • B
    12% (5)
  • C
    59% (24)
  • D
    7% (3)

Explanation

https://aws.amazon.com/blogs/networking-and-content-delivery/adding-macsec-security-to-aws- direct-connect-connections/

Topics

#Direct Connect#MACsec#encrypted transport#transit VIF

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice