Exam ANS-C00 topic 1 question 331 discussion

Ans: B With three 1Gbps direct connection, you can loose one and still get your required bandwith (1-2Gbps)

kpr2022 mentions the need for security so he must select D. But isn't Direct Connect secure just because it is a direct point-to-point? That's why AWS doesn't feel the need to encrypt it. However, if you really want to you can encrypt traffic over Direct Connect anyway. I am thinking B is the correct answer.

My vote is B as VPN can hadle 1.25 Gbps and it is less than peak 2 Gbps

B. Three connections are required to provide fault tolerance. All of the other options would be unable to handle the peak loads over 1 Gbps without exceeding the available bandwidth.

D. Secure connection = VPN. "If your VPN connection is to a Virtual Private Gateway, aggregated throughput limits would apply." : https://aws.amazon.com/vpn/faqs/#:~:text=A%3A%20Each%20AWS%20Site-to,of%20up%20to%201.25%20Gbps

B from AWS dumps here https://d1.awsstatic.com/training-and-certification/docs-advnetworking-spec/AWS_Certified_Advanced_Networking_Specialty_SampleExam.pdf

"D" is the right answer. AWS Direct Connect does not encrypt your traffic that is in transit by default. With AWS Direct Connect and AWS Site-to-Site VPN, you can combine one or more AWS Direct Connect dedicated network connections with the Amazon VPC VPN. This combination provides an IPsec-encrypted private connection that also reduces network costs, increases bandwidth throughput, and provides a more consistent network experience than internet-based VPN connections. https://docs.aws.amazon.com/directconnect/latest/UserGuide/encryption-in-transit.html Q: What is the approximate maximum throughput of a Site-to-Site VPN connection? A: Each AWS Site-to-Site VPN connection has two tunnels and each tunnel supports a maximum throughput of up to 1.25 Gbps. If your VPN connection is to a Virtual Private Gateway, aggregated throughput limits would apply. https://aws.amazon.com/vpn/faqs/#:~:text=A%3A%20Each%20AWS%20Site-to,of%20up%20to%201.25%20Gbps

I will go for B (three 1 Gbps Connection), considering fault tolerance will be achieved in case one connection is down (peak is 2 Gbps)

Question asks for secure and fault-tolerant. Direct connect doesn't encrypt the data and hence requires a VPN on top of it for secure data transmission. With two tunnels and assuming ECMP enabled, will provide 2.5Gbps over DC. Hence D. I

B is the answer

B. Deploy three 1-Gbps Direct Connect connections

B. Deploy three 1-Gbps Direct Connect connections. D. Set up an IPsec VPN connection over Direct Connect with two tunnels. Secure = VPN, LAGs = 3 DX connections