AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 252

Question

A company is migrating its internet VPN connections to dedicated AWS Direct Connect connections. The company needs to set up the Direct Connect connections so that all network communications are encrypted in transit. Which combination of steps will meet this requirement? (Choose three.)

Accepted Answer

Correct answer: A, B, C. The correct answer is A, B, C. Option A: Create new Direct Connect connections while requesting MACsec ports. Option B: Create a MACsec Connectivity Association Key Name (CKN) and Connectivity Association Key (CAK) pair. Associate the pair with each new connection. Option C: Update the on-premises routers to use MACsec and the shared Connectivity Association Key Name (CKN) and Connectivity Association Key (CAK) pair. AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 252