ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 469 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02
Question #: 469
Topic #: 1
[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS. The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC. The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.

The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.

Which combination of steps will meet these requirements? (Choose two.)

  • A. Update the 1 Gbps Direct Connect connection to 10 Gbps.
  • B. Advertise the on-premises network prefixes over the transit VIF.
  • C. Advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
  • D. Update the Direct Connect connection's MACsec encryption mode attribute to must_encrypt.
  • E. Associate a MACsec Connection Key Name/Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️
by CMMC at March 19, 2024, 3:38 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
AzureDP900
7 months, 2 weeks ago
Option B and Option C are correct because they enable connectivity between on-premises infrastructure and AWS VPCs by advertising network prefixes. Option B enables the on-premises network to reach AWS, while option C allows the AWS VPCs to communicate with on-premises resources over a transit VIF.
upvoted 2 times
...
tushar321
1 year, 2 months ago
BC MACsec is ruled out as this needs 10 gbps https://aws.amazon.com/about-aws/whats-new/2021/03/aws-direct-connect-announces-macsec-encryption-for-dedicated-10gbps-and-100gbps-connections-at-select-locations/
upvoted 2 times
...
pangchn
1 year, 3 months ago
Selected Answer: BC
BC just need to add routing at both sides. https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-transit-gateways.html https://docs.aws.amazon.com/vpc/latest/tgw/tgw-prefix-lists.html ADE seems not relevant
upvoted 4 times
...
ahmadraufsyahputra
1 year, 3 months ago
BC because we need to ardvertise the VPC prefixes and on-premise prefixes so the on-premise and VPC can connected
upvoted 3 times
...
Dgix
1 year, 3 months ago
Selected Answer: BC
B and C are correct. A is not required, D needlessly involves encryption, and E doesn't create connectivity.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel