Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon Exam SAP-C02 Topic 7 Question 27 Discussion

Actual exam question for Amazon's SAP-C02 exam
Question #: 27
Topic #: 7
[All SAP-C02 Questions]

A company wants to establish a dedicated connection between its on-premises infrastructure and AWS. The company is setting up a 1 Gbps AWS Direct Connect connection to its account VPC. The architecture includes a transit gateway and a Direct Connect gateway to connect multiple VPCs and the on-premises infrastructure.

The company must connect to VPC resources over a transit VIF by using the Direct Connect connection.

Which combination of steps will meet these requirements? (Select TWO.)

Show Suggested Answer Hide Answer
Suggested Answer: B, C

To connect VPC resources over a transit Virtual Interface (VIF) using a Direct Connect connection, the company should advertise the on-premises network prefixes over the transit VIF and advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the same VIF. This configuration ensures seamless connectivity between the on-premises infrastructure and the AWS VPCs through the transit gateway, facilitating efficient and secure communication across the network.


by Rhea at Apr 13, 2024, 01:34 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Lyndia
7 months ago
I believe so. It's necessary for the architecture setup.
upvoted 0 times
...
Paris
7 months ago
Do we also need to associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection?
upvoted 0 times
...
Bok
7 months ago
Yes, that's correct. It's one of the steps to meet the requirements.
upvoted 0 times
...
Tamala
7 months ago
We also need to advertise the on-premises network prefixes over the transit VIF, right?
upvoted 0 times
...
Lyndia
8 months ago
I agree with Bok. That will help meet the requirements.
upvoted 0 times
...
Bok
8 months ago
I think we need to update the Direct Connect connection to 10 Gbps.
upvoted 0 times
...
Christiane
8 months ago
And we should associate a MACsec Connection Key Name-Connectivity Association Key pair with the Direct Connect connection for added security.
upvoted 0 times
...
Micaela
8 months ago
Yes, that way we can connect our on-premises infrastructure to the VPC resources.
upvoted 0 times
...
Colene
9 months ago
We also need to advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Christiane
9 months ago
I agree, that would help ensure we have enough bandwidth for our needs.
upvoted 0 times
...
Micaela
9 months ago
I think we need to update the Direct Connect connection to 10 Gbps.
upvoted 0 times
...
Bambi
10 months ago
Wait, why E? Associating a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection? That sounds like overkill to me.
upvoted 0 times
...
Stefania
10 months ago
Hold up, what's this 'adverse the VPC prefixes' thing? I think you mean 'advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF', which is option C.
upvoted 0 times
...
Caitlin
10 months ago
Hmm, I'm not sure about updating the 1 Gbps Direct Connect connection to 10 Gbps. That seems like overkill unless we're really pushing a ton of traffic. Let's stick to the minimum requirements for now.
upvoted 0 times
...
Dorsey
10 months ago
Hmm, I'm not so sure about C. Wouldn't that be more for establishing a connection from the on-premises network to the VPC, rather than the other way around? I'd probably lean more towards B and E.
upvoted 0 times
...
Iluminada
10 months ago
You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E. That will provide the necessary encryption for the connection.
upvoted 0 times
Theron
9 months ago
You're on the right track, but I think we also need to associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection, which is option E.
upvoted 0 times
...
Elin
9 months ago
E: Associate a MACsec Connection Key Name-Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
upvoted 0 times
...
Lucy
9 months ago
D: Update the Direct Connect connection's MACsec encryption mode attribute to must encrypt.
upvoted 0 times
...
Vilma
10 months ago
C: Adverse the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
upvoted 0 times
...
Earnestine
10 months ago
B: Advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Tran
10 months ago
A: Update the 1 Gbps Direct Connect connection to 10 Gbps.
upvoted 0 times
...
...
Ellsworth
10 months ago
This question is tricky, but I think I have an idea of what's required. We need to connect the on-premises infrastructure to the VPC resources through the transit VIF, right? So, we'll need to advertise the on-premises network prefixes over the transit VIF, which is option B.
upvoted 0 times
...
Donette
10 months ago
Definitely B and C. Advertising the on-premises network prefixes over the transit VIF and advertising the VPC prefixes from the Direct Connect gateway to the on-premises network makes the most sense to me.
upvoted 0 times
...
Lou
10 months ago
That's a good point. Encrypting the connection might not be necessary, especially if the cost of upgrading to 10 Gbps is a concern. I'd probably go with B and C as the best options.
upvoted 0 times
Anglea
9 months ago
Agreed, and we should also advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
upvoted 0 times
...
Shawnee
9 months ago
I think we should just advertise the on-premises network prefixes over the transit VIF.
upvoted 0 times
...
Chan
9 months ago
I agree, upgrading to 10 Gbps might be expensive.
upvoted 0 times
...
...
Rachael
10 months ago
I agree. The question is pretty clear, but I'm not sure about the MACsec encryption part. Do we really need to encrypt the connection if it's just between our on-premises and the VPC?
upvoted 0 times
...
Cassie
10 months ago
This question seems straightforward, but I'm curious to hear what everyone else thinks. The key seems to be establishing the connection between the on-premises infrastructure and the VPC resources using the transit VIF.
upvoted 0 times
...

Save Cancel