exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 168 discussion

A company has a hybrid IT setup that includes services that run in an on-premises data center and in the AWS Cloud. The company is using AWS Direct Connect to connect its data center to AWS. The company is using one AWS Site-to-Site VPN connection as backup and requires a backup connectivity option to always be present. The company is transitioning to IPv6 by implementing dual-stack architectures.

Which combination of steps will transition the data center's connectivity to AWS in the LEAST amount of time? (Choose two.)

  • A. Create a new Site-to-Site VPN tunnel for the IPv6 traffic.
  • B. Create a new dual-stack Site-to-Site VPN connection between the data center and AWS. Provision routing. Delete the original Site-to-Site VPN connection.
  • C. Associate a new dual-stack public VIF with the Direct Connect connection. Migrate the Direct Connect traffic to the new VIF.
  • D. Add a new IPv6 peer in the existing VIF. Use the IPv6 address provided by Amazon on the peer router.
  • E. Send IPv6 traffic between the data center and AWS in a tunnel inside the existing IPv4 tunnels.
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
tromyunpak
Highly Voted 1 year ago
AD are correct since a new vpn is needed and a new IPv6 peer can be added to the existing vif BE are wrong - since you cannot add iPv6 to an existing s2s and a s2s cannot be dual stack (https://docs.aws.amazon.com/vpn/latest/s2svpn/ipv4-ipv6.html) C is good but not fulfil the least amount of time requirement
upvoted 5 times
...
Rollizo
Most Recent 1 month, 3 weeks ago
Selected Answer: AD
The following rules apply: IPv6 addresses are only supported for the inside IP addresses of the VPN tunnels. The outside tunnel IP addresses for the AWS endpoints are IPv4 addresses, and the public IP address of your customer gateway must be an IPv4 address. Site-to-Site VPN connections on a virtual private gateway do not support IPv6. You cannot enable IPv6 support for an existing Site-to-Site VPN connection. A Site-to-Site VPN connection cannot support both IPv4 and IPv6 traffic. Cannot be B
upvoted 1 times
...
secdaddy
2 months, 2 weeks ago
Selected Answer: BD
Not sure why people are saying A as A has only ipv6 and the requirement is for dual-stack. Need B for new dual-stack VPN + D for adding ipv6 to the existing DX vif.
upvoted 1 times
...
AzureDP900
3 months, 1 week ago
Selected Answer: AD
• Option A: Creating a new Site-to-Site VPN tunnel for IPv6 traffic allows you to gradually transition your connectivity to AWS while still using the existing Direct Connect connection. • Option D: Adding an IPv6 peer to the existing VIF enables you to start sending IPv6 traffic over the existing connection, allowing you to test your dual-stack architecture without disrupting the existing connectivity.
upvoted 1 times
...
woorkim
4 months ago
Selected Answer: AD
cannot enable IPv6 support for an existing Site-to-Site VPN connection.
upvoted 1 times
...
cas_tori
7 months, 2 weeks ago
Selected Answer: AD
A and D
upvoted 1 times
...
cerifyme85
12 months ago
Selected Answer: AD
A D is correct.
upvoted 3 times
...
JoellaLi
1 year ago
Selected Answer: AD
A D is correct. Agree with tromyunpak.
upvoted 2 times
...
Kayceetalks
1 year ago
B and C
upvoted 2 times
...
jinu
1 year ago
A and E
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago