Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS is retiring this exam on Dec 31, 2026.
Question 28 of 198
Free Preview · 198 of 657 · questions 1–198 of 657 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Option C is the only one that: Meets the required encryption requirements Maintains full bandwidth Minimizes changes and complexity Follows AWS best practices for Direct Connect
C is the correct answer. MACSec is a L2 encryption, and best solution to maintain the current bandwidth.
C is the correct answer due you need new DX connections to enable macsec. with macsec you will have throughput required A is wrong since you have cannot public vif with encryption D is wrong since it doesn't make sense to have macsec and ipsec also IPSEC throughput is 1.25Gb/s not 10Gb/s B is wrong due to the throughput is limited by the VPNs and with VPG ecmp is not supported unlike TGW