ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam
Go to Exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 91 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01
Question #: 91
Topic #: 1
[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company needs to transfer data between its VPC and its on-premises data center. The data must travel through a connection that has dedicated bandwidth. The data also must be encrypted in transit. The company has been working with an AWS Partner Network (APN) Partner to establish the connection.

Which combination of steps will meet these requirements? (Choose three.)

  • A. Request a hosted connection from the APN Partner.
  • B. Request a hosted public VIF from the APN Partner.
  • C. Create an AWS Site-to-Site VPN connection.
  • D. Create an AWS Client VPN connection.
  • E. Create a private VIF.
  • F. Create a public VIF.
Show Suggested Answer Hide Answer
Suggested Answer: ACF 🗳️
by lygf at June 6, 2023, 4:32 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
lygf
Highly Voted 2 years, 1 month ago
Selected Answer: ACF
You need public VIF in order to create a Site-to-Site VPN connection.
upvoted 18 times
...
dcantos
Most Recent 2 weeks, 4 days ago
Selected Answer: ACF
This solution combines the benefits of the end-to-end secure IPsec connection with low latency and increased bandwidth of the AWS Direct Connect to provide a more consistent network experience than internet-based VPN connections. A BGP connection session is established between AWS Direct Connect and your router on the public VIF. Another BGP session or a static route will be established between the virtual private gateway and your router on the IPsec VPN tunnels.
upvoted 1 times
...
ashk123456
3 months ago
Selected Answer: ACE
The company needs: 1️⃣ A dedicated bandwidth connection → This means they need AWS Direct Connect (DX). 2️⃣ Encryption for data in transit → DX alone does not provide encryption, so they need AWS Site-to-Site VPN over DX. 3️⃣ A connection established with an APN Partner → This suggests a hosted Direct Connect connection, since APN partners provide those.
upvoted 1 times
...
49ca6f2
5 months, 3 weeks ago
Selected Answer: ACF
ACF , because you cannot create a S2S VPN on the Private VIF. You can either do it on Public VIF because it provides you with Public vpn endpoints or on Transit vif because you assign a TGW CIDR and then get the Private VPN IP from that CIDR
upvoted 1 times
...
djangoGroup
6 months ago
Selected Answer: ACE
A. Request a hosted connection from the APN Partner. • Reason: • A hosted connection provides dedicated bandwidth from the APN Partner. This satisfies the requirement for dedicated bandwidth. • APN Partners offer AWS Direct Connect hosted connections to simplify setup. • Correct. C. Create an AWS Site-to-Site VPN connection. • Reason: • A Site-to-Site VPN adds encryption to the traffic that flows over the Direct Connect connection. This satisfies the requirement for encryption in transit. • AWS Direct Connect alone does not provide encryption, so a VPN is necessary. • Correct. E. Create a private VIF. • Reason: • A private VIF connects the Direct Connect connection to a VPC. This enables private communication between the VPC and the on-premises environment. • Public VIFs are not suitable for this scenario because they expose public AWS endpoints. • Correct.
upvoted 2 times
...
woorkim
7 months, 2 weeks ago
ACE Why not the other options? B. Request a hosted public VIF from the APN Partner: A public VIF is used to access AWS public services such as S3 and Systems Manager, not for private communication with a VPC. D. Create an AWS Client VPN connection: Client VPN is for remote user access, not for site-to-site connectivity. F. Create a public VIF: A public VIF does not support private communication with VPCs. It is used to access public AWS endpoints.
upvoted 1 times
...
Spaurito
8 months, 1 week ago
ACE - Private VIF for the connection with Private IP VPN as per https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/
upvoted 1 times
...
hedglin
11 months, 1 week ago
Correct Answer : ACE. Option F is wrong. Private VIF (Virtual Interface) is the appropriate type of VIF for connecting to a VPC, as opposed to a public VIF which is used for accessing public AWS services.
upvoted 1 times
...
michele_scar
1 year, 4 months ago
Selected Answer: ACF
The PRIVATE VIF as a distractor is so bad :D
upvoted 2 times
Spaurito
8 months ago
I agree. A distractor for sure. So the question doesn't define private or public IP addressing. The only clue to me is the dedicated bandwidth which leads me to the Private VIF
upvoted 1 times
...
...
Marfee400704
1 year, 4 months ago
I think that it's correct answer is ACE according to SPOTO products.
upvoted 1 times
...
cumzle_com
1 year, 7 months ago
Selected Answer: ACF
Private IP VPN is deployed on top of Transit VIFs, so it allows you to use AWS Transit Gateway for centralized management of customers’ Virtual Private Clouds (VPCs) and connections to the on-premises networks in a more secured, private and scalable manner.
upvoted 4 times
...
Tofu13
1 year, 10 months ago
Selected Answer: ACF
U need a public VIF because traditionally the VPN tunnels in S2S VPN use public IPs. However, since last year it is possible to use private IPs as well with a transit VIF. https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/
upvoted 2 times
...
evargasbrz
1 year, 10 months ago
Selected Answer: ACF
ACF is the right option here. If we had a TGW, we could consider the following: Private IP VPN is deployed on top of Transit VIFs, so it allows you to use AWS Transit Gateway for centralized management of customers’ Virtual Private Clouds (VPCs) and connections to the on-premises networks in a more secured, private and scalable manner." so, you must use a public VIF in order to create a Site-to-Site VPN connection
upvoted 3 times
...
TravelKo
2 years ago
ACF is correct. You need transit VIF for private VPN.
upvoted 4 times
...
Wiss7
2 years ago
Selected Answer: ACF
IPsec on DX is either on Transit VIF or Public VIF
upvoted 4 times
...
JosMo
2 years ago
Selected Answer: ACE
you don't need a public VIF for this, so F is wrong
upvoted 4 times
JosMo
2 years ago
quote "That’s why we are announcing Private IP VPN, a new feature that provides customers the ability to deploy AWS Site-to-Site VPN connections over Direct Connect using private IP addresses (RFC1918). With this feature, customers can encrypt traffic between their on-premises networks and AWS via Direct Connect connections without the need for public IP addresses, thus enabling enhanced security and network privacy at the same time. Private IP VPN is deployed on top of Transit VIFs, so it allows you to use AWS Transit Gateway for centralized management of customers’ Virtual Private Clouds (VPCs) and connections to the on-premises networks in a more secured, private and scalable manner." https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/
upvoted 2 times
Cheam
1 year, 8 months ago
"Private IP VPN is deployed on top of Transit VIFs" - there's no Transit VIF in the answer choices, so the answer is ACF. All the best.
upvoted 2 times
...
cumzle_com
1 year, 7 months ago
Private IP VPN is deployed on top of Transit VIFs, so it allows you to use AWS Transit Gateway for centralized management of customers’ Virtual Private Clouds (VPCs) and connections to the on-premises networks in a more secured, private and scalable manner.
upvoted 1 times
...
...
...
Balasmaniam
2 years ago
A Private IP VPN connection requires a Direct Connect gateway and a Transit VIF as the underlying transport. https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/
upvoted 1 times
Balasmaniam
2 years ago
Answer : ACF
upvoted 4 times
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel