A software company offers a software-as-a-service (SaaS) accounting application that is hosted in the AWS Clou

Question

A software company offers a software-as-a-service (SaaS) accounting application that is hosted in the AWS Cloud The application requires
Connectivity to the company's on-premises network. The company has two redundant 10 GB AWS Direct Connect connections between AWS and
Its on-premises network to accommodate the growing demand for the application.
The company already has encryption between its on-premises network and the colocation. The company needs to encrypt tra¨c between AWS
And the edge routers in the colocation within the next few months. The company must maintain its current bandwidth.
What should a network engineer do to meet these requirements with the LEAST operational overhead?

Accepted Answer

C. Deploy a new pair of 10 GB Direct Connect connections with MACsec. Con¦gure MACsec on the edge routers. Reroute tra¨c to the new Direct Connect connections. Decommission the original Direct Connect connections

Answer

A. Deploy a new public VIF with encryption on the existing Direct Connect connections. Reroute tra¨c through the new public VIF.

Answer

B. Create a virtual private gateway Deploy new AWS Site-to-Site VPN connections from on premises to the virtual private gateway Reroute Tra¨c from the Direct Connect private VIF to the new VPNs.

Answer

D. Deploy a new pair of 10 GB Direct Connect connections with MACsec. Deploy a new public VIF on the new Direct Connect connections. Deploy two AWS Site-to-Site VPN connections on top of the new public VIF. Reroute tra¨c from the existing private VIF to the new Site-to-Site Connections. Decommission the original Direct Connect connections.

Q24 — AWS ANS-C01 Ch.1

Correct Answer: C. Deploy a new pair of 10 GB Direct Connect connections with MACsec. Con¦gure MACsec on the edge routers. Reroute tra¨c to the new Direct Connect connections. Decommission the original Direct Connect connections

Explanation