Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 260 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01

Question #: 260
Topic #: 1

[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company deployed an application in two AWS Regions in one AWS account. The company has one VPC in each Region. The VPCs use non-overlapping private CIDR ranges.

The company needs to connect both VPCs to a single on-premises data center to test the application. The application requires up to 800 Mbps of throughput. A network engineer needs to establish connectivity between the VPCs and the on-premises data center.

Which solution will meet this requirement with the LEAST operational overhead?

A. Order a 2 Gbps Direct Connect connection for the data center. Configure a virtual private gateway in each VPC. Create a private VIF for each virtual private gateway, and associate the virtual private gateways with the Direct Connect connection. Configure static routes in the VPC route tables and in the data center router.
B. Order a 2 Gbps Direct Connect connection for the data center. Configure a virtual private gateway in each VPC. Create a private VIF for each virtual private gateway, and associate the virtual private gateways with the Direct Connect connection. Configure Open Shortest Path First (OSPF) routing between the private VIF and the data center.
C. Configure a customer gateway and a virtual private gateway in each VPConfigure an AWS Site-to-Site VPN connection between the data center and each VPConfigure static routes in each VPC route table to point to the subnets in the data center.
D. Configure a customer gateway and a virtual private gateway in each VPC. Configure an AWS Site-to-Site VPN connection between the data center and each VPC. Configure BGP routing between the VPCs and the data center.

Show Suggested Answer

Suggested Answer: D 🗳️

by c1193d4 at Jan. 7, 2025, 4:18 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ashk123456

3 months ago

Selected Answer: D

Option D provides the quickest implementation with the most automated routing management through BGP, making it the solution with the least operational overhead while meeting all requirements. A and B both require ordering and provisioning a physical Direct Connect connection,

upvoted 1 times

...

Sudeepshiv

3 months, 1 week ago

Selected Answer: D

• AWS Site-to-Site VPN is fast to set up, cost-effective, and ideal for temporary or test connectivity. • You can easily establish VPN tunnels to each VPC using virtual private gateways (VGWs) and customer gateways (CGWs). • Using BGP (Border Gateway Protocol) provides dynamic route exchange between your on-premises network and AWS — this reduces manual route configuration and simplifies scaling as new networks are added. • It provides adequate throughput (up to 1.25 Gbps) per VPN connection with ECMP and accelerated VPN — enough for the required 800 Mbps throughput.

upvoted 1 times

...

jfedotov

5 months ago

Selected Answer: C

isn't it easier to configure static routes for 2 VPC and on-prem DC, than configuring BGP? C or D ?

upvoted 2 times

...

woorkim

5 months, 2 weeks ago

Selected Answer: D

answer is D. Using Site-to-Site VPN connections with BGP routing provides: Automatic route propagation Dynamic routing updates Sufficient throughput Lower cost than Direct Connect Minimal operational overhead for maintenance Simpler setup compared to Direct Connect options

upvoted 2 times

...

c1193d4

5 months, 3 weeks ago

Selected Answer: D

D: a VPN is enough for 800 Mbps and for testing

upvoted 1 times

...