Exam ANS-C00 topic 1 question 259 discussion

Exam question from Amazon's ANS-C00

Question #: 259
Topic #: 1

An unfortunate situation has just come to your attention. A business critical application with sensitive data running on-prem will run out of storage disk space in
24hrs. This business critical application is dependent a very large set of routes `" required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re`"home the application. In order to complete the replication of application data and ensure the application remains operational beyond the next 24hrs, select the best implementation.

A. Within the new VPC ג€" establish a Direct Connect connection with max 10Gbps port speed for data replication. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
B. Within the new VPC ג€" deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
C. Within the new VPC ג€" deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
D. Within the new VPC ג€" deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Show Suggested Answer

Suggested Answer: B 🗳️
Answer A ג€" Let's start by stating that all possible options are actually workable solutions. The key criteria of the question is to complete the data migration aspects as *quickly* as possible. With this in mind we can immediately rule out Answer A ג€" due to the time it takes to provision and activate a fully functional Direct
Connect connection, 72+ hrs. Answer C is the same as Answer D but lacks BGP ג€" therefore we would need to setup the routes manually ג€" more time and effort.
Additionally Answer D uses Jumbo Frames ג€" but AWS does not support Jumbo frames over the Virtual Private Gateway ג€" therefore Answer D's use of Jumbo
Frames is negated. Overall Answer B is considered the quickest option.
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/GenericConfig.html

by eeghai7thioyaiR4 at March 17, 2021, 11:05 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

MohamedSherif1

Highly Voted 3 years ago

B. Within the new VPC ג€" deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing

upvoted 8 times

...

Huy

Highly Voted 3 years, 7 months ago

Answer is D. B is incorrect because application use large set of routes for integration. Dynamic routing is only to make application can connect to on-premise. You need to manual add the route of the application. Only D satisfy the requirements. Jumbo frame can be enable on EC2 VPN. It is just a distraction. And of-course, this can be setup in 24 hours.

upvoted 5 times