SAP-C02 · Question #803
A company is migrating internal business applications to Amazon EC2 and Amazon RDS in a VPC. The migration requires connecting the cloud-based applications to the on-premises internal network. The…
The correct answer is A. Create one virtual private gateway. Associate the virtual private gateway with the VPC. Enable. This solution correctly configures a single Virtual Private Gateway with two VPN connections, each to an on-premises customer gateway, enabling highly available connectivity with static routing and route propagation for the VPC.
Question
A company is migrating internal business applications to Amazon EC2 and Amazon RDS in a VPC. The migration requires connecting the cloud-based applications to the on-premises internal network. The company wants to set up an AWS Site-to-Site VPN connection. The company has created two separate customer gateways. The gateways are configured for static routing and have been assigned distinct public IP addresses. Which solution will meet these requirements?
Options
- ACreate one virtual private gateway. Associate the virtual private gateway with the VPC. Enable
- BCreate one customer gateway. Associate the customer gateway with the VPC. Enable route
- CCreate two virtual private gateways. Associate the virtual private gateways with the VPC.
- DCreate two virtual private gateways. Associate the virtual private gateways with the VPC.
How the community answered
(55 responses)- A91% (50)
- B5% (3)
- C2% (1)
- D2% (1)
Why each option
This solution correctly configures a single Virtual Private Gateway with two VPN connections, each to an on-premises customer gateway, enabling highly available connectivity with static routing and route propagation for the VPC.
A single Virtual Private Gateway can terminate multiple VPN connections. Creating two VPN connections, one for each on-premises customer gateway, ensures high availability and redundancy, and enabling route propagation for the VPG correctly handles static routes.
The problem explicitly states the company has 'two separate customer gateways,' which this option contradicts by suggesting only one customer gateway.
A single VPC can only have one Virtual Private Gateway attached at a time, making the creation of two virtual private gateways for one VPC impossible.
A single VPC can only have one Virtual Private Gateway attached at a time, making the creation of two virtual private gateways for one VPC impossible.
Concept tested: AWS Site-to-Site VPN configuration for high availability with multiple customer gateways and static routing
Source: https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html
Community Discussion
No community discussion yet for this question.