Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 17 discussion

Exam question from Amazon's ANS-C00

Question #: 17
Topic #: 1

You have to set up an AWS Direct Connect connection to connect your on-premises to an AWS VPC. Due to budget requirements, you can only provision a single
Direct Connect port. You have two border gateway routers at your on-premises data center that can peer with the Direct Connect routers for redundancy.
Which two design methodologies, in combination, will achieve this connectivity? (Choose two.)

A. Terminate the Direct Connect circuit on a L2 border switch, which in turn has trunk connections to the two routers.
B. Create two Direct Connect private VIFs for the same VPC, each with a different peer IP.
C. Terminate the Direct Connect circuit on any of the one routers, which in turn will have an IBGP session with the other router.
D. Create one Direct Connect private VIF for the VPC with two customer peer IPs.
E. Provision two VGWs for the VPC and create one Direct Connect private VIF per VGW.

Show Suggested Answer

Suggested Answer: AB 🗳️

by vikramrathode at June 22, 2019, 1:55 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

route53

Highly Voted 3 years, 9 months ago

A&B for me

upvoted 18 times

...

BillyC

Highly Voted 3 years, 9 months ago

A and B

upvoted 6 times

...

PavanKushwah123

Most Recent 2 years, 6 months ago

Correct Answer A D

upvoted 1 times

...

Bobip

3 years ago

The problem of this question is because the DX terminates in a single switch (Based on A.), we would face single point of failure situation in L2 level. Which means no redundancy anyway!

upvoted 1 times

...

Aimee26

3 years, 4 months ago

A & B D is incorrect because; 'A virtual interface can support a single IPv4 BGP peering session and a single IPv6 BGP peering session.' https://docs.aws.amazon.com/directconnect/latest/UserGuide/add-peer-to-vif.html

upvoted 1 times

...

Jazz888

3 years, 5 months ago

You certainly can add a BGP peering to the same Private VIF, but I think the catch is you can not publish the same IP family as the first peer. "A virtual interface can support a BGP peering session for IPv4, IPv6, or one of each (dual-stack). You cannot create multiple BGP sessions for the same IP addressing family on the same virtual interface." Check step 4 - table Peer IP Addresses on the link. https://docs.aws.amazon.com/directconnect/latest/UserGuide/getting_started.html I go for A and B

upvoted 1 times

...

Emushu

3 years, 6 months ago

B is not a good answer b/c of the statement of the question "Due to financial constraints, you are only able to supply one Direct Connect port"

upvoted 1 times

...

ceros399

3 years, 7 months ago

Selected Answer: AB

It's documented that you can have more than one peer IP for VIPs but it is only supported on limited regions.

upvoted 1 times

...

mabalon

3 years, 7 months ago

Selected Answer: AB

A - > you need a switch in order to connect each onpremise router to each virtual private interface. Each virtual interface have different VLAN-ID b -> Create two VIF with different VLans-ID, different Peers but same ASN. https://aws.amazon.com/es/blogs/networking-and-content-delivery/creating-active-passive-bgp-connections-over-aws-direct-connect/ C-> Possible but without routers redundancy D-> Incorrect, you cannot create 1 VIF with 2 different customer peer IP E -> Incorrect, only one VGW per VPC

upvoted 3 times

Balki

2 years, 6 months ago

An answer without an explanation is like a Country without Covid-19. Best answer

upvoted 1 times

...

JoshuaAlkar

3 years, 1 month ago

best explanation

upvoted 1 times

...

AlirezaNetWorld

3 years, 7 months ago

D should be correct; BGP-wise, it's supposed to be possible to bring up two BGP neighborships over one connection. So, the correct answers are A and D

upvoted 1 times

...

Jshuen

3 years, 9 months ago

A,D in some DX locations, you can create 2 BGP peers in 1 VIF https://docs.aws.amazon.com/directconnect/latest/UserGuide/add-peer-to-vif.html

upvoted 2 times

Jshuen

3 years, 9 months ago

revisit the doc again but found the statement said some DX locations support 2 BGP peer removed, thus each VIF supports 1 bgp peer only and D should be incorrect

upvoted 1 times

...

Globetrotter

3 years, 9 months ago

A and B looks good, but guys still it is a single point of failure right , what happens if the switch fails

upvoted 4 times

CloudTrail

3 years, 9 months ago

Switch can be a stack

upvoted 3 times

JamesTR

3 years, 8 months ago

@ CloudTrail But if main switch in the stack fails, you will have to physically connect direct connect fiber to second switch, or rather ask Direct Connect location to move the cable. Will they do that without new LOA ?

upvoted 1 times

student2020

3 years, 8 months ago

If its your switch that fails, you move the connection to another switch, not need for DX location to do anything on the AWS router side where the LOA is required

upvoted 2 times

...

aviz

3 years, 9 months ago

Can anyone help me explain this question?

upvoted 1 times

HazemYousry

3 years, 9 months ago

A- Correct B- Correct C- Doesn't make any value with redundancy D- You cannot create 1 VIF with 2 different customer peer IP E- You can only have one VGW per VPC

upvoted 15 times

PeppaPig

3 years, 8 months ago

E- more precisely, you can only have one VGW attached per VPC

upvoted 2 times

...

vikramrathode

3 years, 9 months ago

answer should be B. D is incorrect as you cannot create 1 VIF with 2 different customer peer IP's

upvoted 5 times

...