ANS-C01 Question 187
Select 3You are managing a hybrid cloud environment where your on-premises network is connected to your VPC via AWS Direct Connect. You want to ensure dynamic route propagation between your on-premises environment and the VPC. Which combination of actions should you take to achieve this?
- A
Enable Border Gateway Protocol (BGP) on the AWS Direct Connect connection.
- B
Configure a Virtual Private Gateway (VGW) in your VPC and associate it with the Direct Connect connection.
- C
Use a static route table in the VPC to configure a route to your on-premises network.
- D
Enable route propagation on the VPC route table.
- E
Use AWS Transit Gateway to enable dynamic routing instead of a Virtual Private Gateway.
Show answer and explanation
Correct answers: A, B, D
Explanation
To achieve dynamic route propagation between an on-premises network and a VPC over AWS Direct Connect, you must use BGP as the routing protocol. BGP allows dynamic exchange of routing information. A Virtual Private Gateway (VGW) is required to establish the connection between the Direct Connect link and the VPC. Additionally, route propagation must be enabled on the VPC route table so it can dynamically learn and use the routes advertised via BGP. While AWS Transit Gateway supports dynamic routing, it is not necessary in this specific setup.
- A. Correct.
Correct. BGP is a dynamic routing protocol that enables route propagation between the on-premises network and the VPC over the Direct Connect connection.
- B. Correct.
Correct. A Virtual Private Gateway (VGW) is required to connect your VPC to an external network, such as an on-premises environment, via Direct Connect.
- C. Incorrect.
Incorrect. Static routing does not support dynamic route propagation, which is the objective of this scenario.
- D. Correct.
Correct. Route propagation must be enabled on the VPC route table to automatically propagate routes learned via BGP.
- E. Incorrect.
Incorrect. While AWS Transit Gateway supports dynamic routing, it is not required in this scenario because the requirements can be fulfilled using a Virtual Private Gateway with BGP.