ANS-C01 Question 182
Select 3Your company has an on-premises data center connected to AWS through an AWS Direct Connect connection. You want to ensure high availability and failover for your critical applications by adding a backup connection. The backup connection should provide automatic failover to the public internet in case of an issue with the Direct Connect connection. Which combination of steps would you take to implement this solution?
- A
Use a VPN connection over the internet as a backup to the AWS Direct Connect connection.
- B
Enable BGP routing on both the AWS Direct Connect and the VPN connection.
- C
Create a static route in the AWS Virtual Private Gateway to prioritize the VPN connection over Direct Connect.
- D
Configure the VPN connection as a backup by assigning a higher BGP AS_PATH prepend value to its routes.
- E
Deploy an additional AWS Direct Connect connection in a second location for failover.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure high availability and failover for critical applications, you can use a VPN connection over the public internet as a backup to AWS Direct Connect. BGP routing is essential for dynamic route advertisement and automatic failover. By assigning a higher BGP AS_PATH prepend value to the VPN connection, you can ensure it is used only when the Direct Connect connection fails. Deploying an additional Direct Connect connection is a valid redundancy approach but does not meet the requirement for a public internet backup solution.
- A. Correct.
This is a correct step. A VPN connection over the internet can act as a backup to the AWS Direct Connect connection for high availability and failover.
- B. Correct.
This is a correct step. Enabling BGP routing on both connections allows dynamic route propagation and automatic failover based on path priority.
- C. Incorrect.
This is incorrect. Static routes do not provide automatic failover. BGP routing should be used for dynamic failover.
- D. Correct.
This is a correct step. Configuring a higher BGP AS_PATH prepend value on the VPN connection will ensure it is used only when the Direct Connect connection fails.
- E. Incorrect.
This is incorrect. While deploying a second Direct Connect connection provides redundancy, it is not a backup solution over the public internet as specified in the scenario.