Amazon Exam ANS-C01 Topic 3 Question 32 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 32
Topic #: 3

A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new 10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration must occur over encrypted paths between the on-premises data center and the AWS Cloud.

Which solution will meet these requirements while providing the HIGHEST throughput?

AConfigure a public VIF on the Direct Connect connection. Configure an AWS Site-to-Site VPN connection to the transit gateway as a VPN attachment.

BConfigure a transit VIF on the Direct Connect connection. Configure an IPsec VPN connection to an EC2 instance that is running third-party VPN software.

CConfigure MACsec for the Direct Connect connection. Configure a transit VIF to a Direct Connect gateway that is associated with the transit gateway.

DConfigure a public VIF on the Direct Connect connection. Configure two AWS Site-to-Site VPN connections to the transit gateway. Enable equal-cost multi-path (ECMP) routing.

Show Suggested Answer

Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.

by Pok at Jul 17, 2024, 08:15 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glory

2 months ago

Ah, the classic 'highest throughput' question. I'd say Option C is the way to go - MACsec encryption and the Direct Connect gateway just sound like a perfect match.

upvoted 0 times

Shenika

20 days ago

Yeah, Option C with MACsec and Direct Connect gateway is the way to go for encrypted paths and high throughput.

upvoted 0 times

...

Arlie

21 days ago

I agree, MACsec encryption and Direct Connect gateway seem like a solid combination.

upvoted 0 times

...

Lucy

1 months ago

Option C is definitely the best choice for highest throughput.

upvoted 0 times

...

Pamella

2 months ago

Hmm, Option A looks a bit outdated. Public VIFs and Site-to-Site VPNs don't scream 'highest throughput' to me.

upvoted 0 times

Carmela

22 days ago

Yeah, Option C definitely seems like the way to go for the migration plan.

upvoted 0 times

...

Verona

23 days ago

I agree, Option C sounds like the most efficient solution for encrypted paths and high throughput.

upvoted 0 times

...

Edison

1 months ago

Option C seems like the best choice. MACsec for encryption and a transit VIF for high throughput.

upvoted 0 times

...

Timothy

2 months ago

As a network engineer, I'd go with Option B. Leveraging a third-party VPN solution on an EC2 instance gives me more control and flexibility over the encryption implementation.

upvoted 0 times

...

Desirae

2 months ago

I'm leaning towards Option D. Dual VPN connections with ECMP routing could offer excellent failover and potentially higher throughput than a single VPN connection.

upvoted 0 times

Kattie

2 days ago

Option A could work too, but I think Option D might provide higher throughput with ECMP routing.

upvoted 0 times

...

Almeta

4 days ago

But what about Option A with a public VIF and AWS Site-to-Site VPN?

upvoted 0 times

...

Alline

5 days ago

I agree, having two VPN connections with ECMP routing could be beneficial.

upvoted 0 times

...

Beckie

1 months ago

Option D sounds like a good choice for redundancy and potential throughput.

upvoted 0 times

...

Tyra

2 months ago

That's a good point, Rosio. Option D does offer a way to increase throughput with ECMP routing. It's definitely worth considering for the migration.

upvoted 0 times

...

Carrol

2 months ago

Option C seems the most robust solution, providing encryption at the data link layer with MACsec. Plus, the Direct Connect gateway connectivity to the transit gateway should offer great throughput.

upvoted 0 times

Chaya

1 months ago

I agree, using MACsec for encryption and connecting to the transit gateway through the Direct Connect gateway should provide the performance needed for critical workloads.

upvoted 0 times

...

Maryann

1 months ago

Option C seems like the best choice for ensuring encrypted paths and high throughput.

upvoted 0 times

...

Rosio

2 months ago

I disagree, I believe option D is the better solution. By configuring two AWS Site-to-Site VPN connections with ECMP routing, we can achieve higher throughput for the migration.

upvoted 0 times

...

Tyra

3 months ago

I think option A is the best choice because it involves setting up a public VIF on the Direct Connect connection and using an AWS Site-to-Site VPN connection for encryption.

upvoted 0 times

...