ANS-C01 Question 178
Select 4Your organization is setting up a hybrid cloud architecture with multiple on-premises data centers connected to AWS using AWS Direct Connect. The organization requires high availability and automatic failover for the connections. Additionally, there is a need to extend the VPC CIDR ranges to the on-premises data centers using Border Gateway Protocol (BGP). Which configuration steps should you implement to meet these requirements?
- A
Configure two Direct Connect connections in separate locations.
- B
Enable Bidirectional Forwarding Detection (BFD) on the Direct Connect connections.
- C
Set up a Direct Connect Gateway to allow routing between multiple VPCs and the on-premises data centers.
- D
Use static routing instead of BGP to simplify routing configurations.
- E
Create a virtual private gateway and attach it to the VPC for routing traffic between AWS and on-premises.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To implement a highly available hybrid cloud architecture with AWS Direct Connect, you must configure redundancy using multiple Direct Connect connections in separate locations. BFD ensures rapid failover detection for BGP sessions. A Direct Connect Gateway is essential for routing traffic across multiple VPCs and on-premises networks. A virtual private gateway facilitates routing between the VPC and on-premises network. Static routing is not suitable as it lacks dynamic routing and failover capabilities, which are critical for high availability.
- A. Correct.
Correct: Configuring two Direct Connect connections in separate locations ensures high availability and redundancy for your hybrid cloud architecture.
- B. Correct.
Correct: Enabling BFD provides fast failover detection for BGP sessions, ensuring automatic failover in case of a link failure.
- C. Correct.
Correct: A Direct Connect Gateway allows you to connect multiple VPCs across Regions to your on-premises data center using a single Direct Connect connection.
- D. Incorrect.
Incorrect: Static routing does not provide dynamic failover or scalability compared to BGP, making it less suitable for a high-availability architecture.
- E. Correct.
Correct: A virtual private gateway is necessary for routing traffic between the VPC and the on-premises network, enabling connectivity.