Amazon Exam SAP-C02 Topic 7 Question 27 Discussion

Actual exam question for Amazon's SAP-C02 exam

Question #: 27
Topic #: 7

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS. The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC. The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.

The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.

Which combination of steps will meet these requirements? (Select TWO.)

AUpdate the 1 Gbps Direct Connect connection to 10 Gbps.

BAdvertise the on-premises network prefixes over the transit VIF.

CAdverse the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.

DUpdate the Direct Connect connection's MACsec encryption mode attribute to must encrypt.

EAssociate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.

Show Suggested Answer

Suggested Answer: B, C

To connect VPC resources over a transit Virtual Interface (VIF) using a Direct Connect connection, the company should advertise the on-premises network prefixes over the transit VIF and advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the same VIF. This configuration ensures seamless connectivity between the on-premises infrastructure and the AWS VPCs through the transit gateway, facilitating efficient and secure communication across the network.

by Rhea at Apr 13, 2024, 01:34 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lyndia

5 months ago

I believe so. It's necessary for the architecture setup.

upvoted 0 times

...

Paris

5 months ago

Do we also need to associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection?

upvoted 0 times

...

Bok

5 months ago

Yes, that's correct. It's one of the steps to meet the requirements.

upvoted 0 times

...

Tamala

6 months ago

We also need to advertise the on-premises network prefixes over the transit VIF, right?

upvoted 0 times

...

Lyndia

6 months ago

I agree with Bok. That will help meet the requirements.

upvoted 0 times

...

Bok

6 months ago

I think we need to update the Direct Connect connection to 10 Gbps.

upvoted 0 times

...

Christiane

6 months ago

And we should associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection for added security.

upvoted 0 times

...

Micaela

6 months ago

Yes, that way we can connect our on-premises infrastructure to the VPC resources.

upvoted 0 times

...

Colene

7 months ago

We also need to advertise the on-premises network prefixes over the transit VIF.

upvoted 0 times

...

Christiane

7 months ago

I agree, that would help ensure we have enough bandwidth for our needs.

upvoted 0 times

...

Micaela

7 months ago

I think we need to update the Direct Connect connection to 10 Gbps.

upvoted 0 times

...

Bambi

8 months ago

Wait, why E? Associating a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection? That sounds like overkill to me.

upvoted 0 times

...

Stefania

8 months ago

Hold up, what's this 'adverse the VPC prefixes' thing? I think you mean 'advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF', which is option C.

upvoted 0 times

...

Caitlin

8 months ago

Hmm, I'm not sure about updating the 1 Gbps Direct Connect connection to 10 Gbps. That seems like overkill unless we're really pushing a ton of traffic. Let's stick to the minimum requirements for now.

upvoted 0 times

...

Dorsey

8 months ago

Hmm, I'm not so sure about C. Wouldn't that be more for establishing a connection from the on-premises network to the VPC, rather than the other way around? I'd probably lean more towards B and E.

upvoted 0 times

...

Iluminada

8 months ago

You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E. That will provide the necessary encryption for the connection.

upvoted 0 times

Theron

7 months ago

You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E.

upvoted 0 times

...

Elin

8 months ago

E: Associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.

upvoted 0 times

...

Lucy

8 months ago

D: Update the Direct Connect connection's MACsec encryption mode attribute to must encrypt.

upvoted 0 times

...

Vilma

8 months ago

C: Adverse the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.

upvoted 0 times

...

Earnestine

8 months ago

B: Advertise the on-premises network prefixes over the transit VIF.

upvoted 0 times

...

Tran

8 months ago

A: Update the 1 Gbps Direct Connect connection to 10 Gbps.

upvoted 0 times

...

Ellsworth

8 months ago

This question is tricky, but I think I have an idea of what's required. We need to connect the on-premises infrastructure to the VPC resources through the transit VIF, right? So, we'll need to advertise the on-premises network prefixes over the transit VIF, which is option B.

upvoted 0 times

...

Donette

8 months ago

Definitely B and C. Advertising the on-premises network prefixes over the transit VIF and advertising the VPC prefixes from the Direct Connect gateway to the on-premises network makes the most sense to me.

upvoted 0 times

...

Lou

8 months ago

That's a good point. Encrypting the connection might not be necessary, especially if the cost of upgrading to 10 Gbps is a concern. I'd probably go with B and C as the best options.

upvoted 0 times

Anglea

7 months ago

Agreed, and we should also advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.

upvoted 0 times

...

Shawnee

7 months ago

I think we should just advertise the on-premises network prefixes over the transit VIF.

upvoted 0 times

...

Chan

7 months ago

I agree, upgrading to 10 Gbps might be expensive.

upvoted 0 times

...

Rachael

8 months ago

I agree. The question is pretty clear, but I'm not sure about the MACsec encryption part. Do we really need to encrypt the connection if it's just between our on-premises and the VPC?

upvoted 0 times

...

Cassie

8 months ago

This question seems straightforward, but I'm curious to hear what everyone else thinks. The key seems to be establishing the connection between the on-premises infrastructure and the VPC resources using the transit VIF.

upvoted 0 times

...