nerdexam
AmazonAmazon

ANS-C01 · Question #28

ANS-C01 Question #28: Real Exam Question with Answer & Explanation

Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #28. The question stem and answer options stay visible for context.

Submitted by viktor_hu· Mar 6, 2026Network Security

Question

A software company offers a software-as-a-service (SaaS) accounting application that is hosted in the AWS Cloud The application requires connectivity to the company's on-premises network. The company has two redundant 10 GB AWS Direct Connect connections between AWS and its on-premises network to accommodate the growing demand for the application. The company already has encryption between its on-premises network and the colocation. The company needs to encrypt traffic between AWS and the edge routers in the colocation within the next few months. The company must maintain its current bandwidth. What should a network engineer do to meet these requirements with the LEAST operational overhead?

Options

  • ADeploy a new public VIF with encryption on the existing Direct Connect connections. Reroute
  • BCreate a virtual private gateway Deploy new AWS Site-to-Site VPN connections from on
  • CDeploy a new pair of 10 GB Direct Connect connections with MACsec. Configure MACsec on the
  • DDeploy a new pair of 10 GB Direct Connect connections with MACsec. Deploy a new public VIF

Unlock ANS-C01 to see the answer

You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#AWS Direct Connect#MACsec#Network encryption#Hybrid connectivity
Full ANS-C01 PracticeBrowse All ANS-C01 Questions