nerdexam
Amazon

ANS-C01 · Question #28

A software company offers a software-as-a-service (SaaS) accounting application that is hosted in the AWS Cloud The application requires connectivity to the company's on-premises network. The…

The correct answer is C. Deploy a new pair of 10 GB Direct Connect connections with MACsec. Configure MACsec on the. https://docs.aws.amazon.com/directconnect/latest/UserGuide/MACsec.html

Submitted by viktor_hu· Mar 6, 2026Network Security

Question

A software company offers a software-as-a-service (SaaS) accounting application that is hosted in the AWS Cloud The application requires connectivity to the company's on-premises network. The company has two redundant 10 GB AWS Direct Connect connections between AWS and its on-premises network to accommodate the growing demand for the application. The company already has encryption between its on-premises network and the colocation. The company needs to encrypt traffic between AWS and the edge routers in the colocation within the next few months. The company must maintain its current bandwidth. What should a network engineer do to meet these requirements with the LEAST operational overhead?

Options

  • ADeploy a new public VIF with encryption on the existing Direct Connect connections. Reroute
  • BCreate a virtual private gateway Deploy new AWS Site-to-Site VPN connections from on
  • CDeploy a new pair of 10 GB Direct Connect connections with MACsec. Configure MACsec on the
  • DDeploy a new pair of 10 GB Direct Connect connections with MACsec. Deploy a new public VIF

How the community answered

(40 responses)
  • A
    10% (4)
  • B
    5% (2)
  • C
    63% (25)
  • D
    23% (9)

Explanation

https://docs.aws.amazon.com/directconnect/latest/UserGuide/MACsec.html

Topics

#AWS Direct Connect#MACsec#Network encryption#Hybrid connectivity

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice