Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Advanced Networking - Specialty · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Scratch that, B is appropriate because S2S VPN can't be established on Private vif
Option B meets all of the requirements with least operational overhead: It uses a transit gateway and a transit VIF on the Direct Connect connection. Associating the transit VIF with a Direct Connect gateway ensures that communication between the Direct Connect connection and the AWS infrastructure is secure. The transit gateway can be associated with a new transit gateway, which allows data to flow between sites while maintaining security and meeting requirements. It sets up an AWS Site-to-Site VPN private IP VPN connection to the transit gateway.
https://docs.aws.amazon.com/vpn/latest/s2svpn/private-ip-dx.html