ANS-C01 · Question #284
A company uses AWS Site-to-Site VPN connections to encrypt traffic between the company's on- premises location and a single VPC. The Site-to-Site VPN connections use two 1 Gbps AWS Direct Connect…
The correct answer is A. Create a transit gateway and a Direct Connect gateway. Associate the transit gateway with the C. Assign a private IP CIDR block to the transit gateway. E. Create a transit VIF to the Direct Connect gateway. Create a Site-to-Site VPN private IP VPN. The transit gateway allows for scalable and centralized routing between multiple VPCs and on- premises networks. Associating it with a Direct Connect gateway enables private connectivity over the existing Direct Connect connections, which is more efficient than creating…
Question
A company uses AWS Site-to-Site VPN connections to encrypt traffic between the company's on- premises location and a single VPC. The Site-to-Site VPN connections use two 1 Gbps AWS Direct Connect connections with public VIFs. The company plans to add 15 additional VPCs in the same AWS Region. The company must maintain the same level of encryption that the Site-to-Site VPN connections currently provide for each connection between the on- premises location and the new VPCs. The new connections must not use public IP addresses. The bandwidth of the Site-to-Site VPN connections will remain less than the current provisioned speed. Which combination of steps will meet these requirements with LEAST operational overhead? (Choose three.)
Options
- ACreate a transit gateway and a Direct Connect gateway. Associate the transit gateway with the
- BFor each new VPC, create a new Direct Connect private VIF to a Direct Connect gateway.
- CAssign a private IP CIDR block to the transit gateway.
- DAssign a public IP CIDR block to the transit gateway.
- ECreate a transit VIF to the Direct Connect gateway. Create a Site-to-Site VPN private IP VPN
- FCreate a public VIF. Create a Site-to-Site VPN public IP VPN connection.
How the community answered
(40 responses)- A65% (26)
- B5% (2)
- D10% (4)
- F20% (8)
Explanation
The transit gateway allows for scalable and centralized routing between multiple VPCs and on- premises networks. Associating it with a Direct Connect gateway enables private connectivity over the existing Direct Connect connections, which is more efficient than creating separate Direct Connect VIFs for each new VPC. Assigning a private IP CIDR block to the transit gateway ensures that all traffic is routed securely and avoids the use of public IPs, which meets the requirement for private connectivity. A transit VIF to the Direct Connect gateway provides encrypted communication using a private IP VPN. This configuration ensures encryption similar to the Site-to-Site VPN connections while leveraging private IPs and the existing Direct Connect infrastructure.
Community Discussion
No community discussion yet for this question.