AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 139

Question

A company has an AWS environment that includes multiple VPCs that are connected by a transit gateway. The company has decided to use AWS Site-to-Site VPN to establish connectivity between its on-premises network and its AWS environment. The company does not have a static public IP address for its on-premises network. A network engineer must implement a solution to initiate the VPN connection on the AWS side of the connection for traffic from the AWS environment to the on-premises network. Which combination of steps should the network engineer take to establish VPN connectivity between the transit gateway and the on-premises network? (Choose three.)

Accepted Answer

Correct answer: B, C, F. The correct answer is B, C, F. Option B: Configure the Site-to-Site VPN tunnel options to use Internet Key Exchange version 2 (IKEv2). Option C: Use a private certificate authority (CA) from AWS Private Certificate Authority to create a certificate. Option F: Create a customer gateway without specifying the IP address of the customer gateway device. AWS Site-to-Site VPN provides encrypted connectivity between on premises and a VPC. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 139