nerdexam
Amazon

ANS-C01 · Question #293

A company has several AWS Site-to-Site VPN connections between an on-premises customer gateway and a transit gateway. The company's application uses IPv4 to communicate through the VPN connections…

The correct answer is A. Create a new Site-to-Site VPN connection that supports IPv6. IPv6 Support in VPN Connections: Existing AWS Site-to-Site VPN connections that were originally configured for IPv4 do not automatically support IPv6 traffic. To enable IPv6 communication, a new Site-to-Site VPN connection must be created that explicitly supports IPv6. Least…

Submitted by luis.pe· Mar 6, 2026Hybrid Connectivity

Question

A company has several AWS Site-to-Site VPN connections between an on-premises customer gateway and a transit gateway. The company's application uses IPv4 to communicate through the VPN connections. The company has updated the VPC to be dual stack and wants to transition to using IPv6-only for new workloads. When the company tries to communicate through the existing VPN connections, IPv6 traffic fails. Which solution will provide IPv6 support with the LEAST operational overhead?

Options

  • ACreate a new Site-to-Site VPN connection that supports IPv6.
  • BCreate a new Site-to-Site VPN connection to a self-managed Amazon EC2 instance that runs
  • CUpdate the existing Site-to-Site VPN connections to support IPv6.
  • DUpdate the on-premises customer gateway's public IP address from IPv4 to IPv6.

How the community answered

(23 responses)
  • A
    91% (21)
  • B
    4% (1)
  • D
    4% (1)

Explanation

IPv6 Support in VPN Connections: Existing AWS Site-to-Site VPN connections that were originally configured for IPv4 do not automatically support IPv6 traffic. To enable IPv6 communication, a new Site-to-Site VPN connection must be created that explicitly supports IPv6. Least Operational Overhead: Creating a new IPv6-enabled Site-to-Site VPN connection is straightforward and does not require extensive reconfiguration of the existing IPv4 setup. This ensures a smooth transition to dual-stack or IPv6-only workloads with minimal disruption. Support for Dual-Stack Workloads: The new IPv6-enabled Site-to-Site VPN connection can coexist with the existing IPv4 connections, allowing the company to transition workloads incrementally to IPv6.

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice