Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 168 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01

Question #: 168
Topic #: 1

[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company has a hybrid IT setup that includes services that run in an on-premises data center and in the AWS Cloud. The company is using AWS Direct Connect to connect its data center to AWS. The company is using one AWS Site-to-Site VPN connection as backup and requires a backup connectivity option to always be present. The company is transitioning to IPv6 by implementing dual-stack architectures.

Which combination of steps will transition the data center's connectivity to AWS in the LEAST amount of time? (Choose two.)

A. Create a new Site-to-Site VPN tunnel for the IPv6 traffic.
B. Create a new dual-stack Site-to-Site VPN connection between the data center and AWS. Provision routing. Delete the original Site-to-Site VPN connection.
C. Associate a new dual-stack public VIF with the Direct Connect connection. Migrate the Direct Connect traffic to the new VIF.
D. Add a new IPv6 peer in the existing VIF. Use the IPv6 address provided by Amazon on the peer router.
E. Send IPv6 traffic between the data center and AWS in a tunnel inside the existing IPv4 tunnels.

Show Suggested Answer

Suggested Answer: AD 🗳️

by jinu at March 19, 2024, 1:02 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

tromyunpak

Highly Voted 1 year, 4 months ago

AD are correct since a new vpn is needed and a new IPv6 peer can be added to the existing vif BE are wrong - since you cannot add iPv6 to an existing s2s and a s2s cannot be dual stack (https://docs.aws.amazon.com/vpn/latest/s2svpn/ipv4-ipv6.html) C is good but not fulfil the least amount of time requirement

upvoted 5 times

...

Rollizo

Most Recent 6 months, 1 week ago

Selected Answer: AD

The following rules apply: IPv6 addresses are only supported for the inside IP addresses of the VPN tunnels. The outside tunnel IP addresses for the AWS endpoints are IPv4 addresses, and the public IP address of your customer gateway must be an IPv4 address. Site-to-Site VPN connections on a virtual private gateway do not support IPv6. You cannot enable IPv6 support for an existing Site-to-Site VPN connection. A Site-to-Site VPN connection cannot support both IPv4 and IPv6 traffic. Cannot be B

upvoted 1 times

...

secdaddy

6 months, 3 weeks ago

Selected Answer: BD

Not sure why people are saying A as A has only ipv6 and the requirement is for dual-stack. Need B for new dual-stack VPN + D for adding ipv6 to the existing DX vif.

upvoted 1 times

...

AzureDP900

7 months, 3 weeks ago

Selected Answer: AD

• Option A: Creating a new Site-to-Site VPN tunnel for IPv6 traffic allows you to gradually transition your connectivity to AWS while still using the existing Direct Connect connection. • Option D: Adding an IPv6 peer to the existing VIF enables you to start sending IPv6 traffic over the existing connection, allowing you to test your dual-stack architecture without disrupting the existing connectivity.

upvoted 1 times

...