ANS-C01 · Question #295
A company has an AWS environment that includes multiple VPCs that are connected by a transit gateway. The company wants to use a certificate-based AWS Site-to-Site VPN connection to establish…
The correct answer is B. Create a private certificate in AWS Certificate Manager (ACM). D. Create a customer gateway. Specify the current dynamic IP address of the customer gateway. Create a private certificate in AWS Certificate Manager (ACM): This involves setting up a private Certificate Authority (CA) within AWS ACM, which will be used to issue certificates for authenticating your customer gateway device. Create a customer gateway. Specify the current…
Question
A company has an AWS environment that includes multiple VPCs that are connected by a transit gateway. The company wants to use a certificate-based AWS Site-to-Site VPN connection to establish connectivity between an on-premises environment and the AWS environment. The company does not have a static public IP address for the on-premises environment. Which combination of steps should the company take to establish VPN connectivity between the transit gateway and the on-premises environment? (Choose two.)
Options
- ACreate a public certificate in AWS Certificate Manager (ACM).
- BCreate a private certificate in AWS Certificate Manager (ACM).
- CConfigure the Site-to-Site VPN tunnels to use the pre-shared key (PSK).
- DCreate a customer gateway. Specify the current dynamic IP address of the customer gateway
- ECreate a customer gateway. Do not specify the IP address of the customer gateway device.
How the community answered
(58 responses)- A7% (4)
- B74% (43)
- C3% (2)
- E16% (9)
Explanation
Create a private certificate in AWS Certificate Manager (ACM): This involves setting up a private Certificate Authority (CA) within AWS ACM, which will be used to issue certificates for authenticating your customer gateway device. Create a customer gateway. Specify the current dynamic IP address of the customer gateway device's external interface: Even though on-premises environment doesn't have a static IP, you can still configure the customer gateway in AWS by specifying its current dynamic IP address. This setup allows AWS to recognize and authenticate your customer gateway device during the VPN connection establishment.
Community Discussion
No community discussion yet for this question.