ANS-C01 Question 201
Select 3Your company has deployed a hybrid network architecture where an on-premises data center connects to an Amazon VPC using an AWS Direct Connect connection. The on-premises network uses VLANs for segmentation, and the VPC has multiple subnets. You are tasked with ensuring that traffic from specific VLANs is routed to specific subnets in the VPC. Which of the following steps should you take to achieve this goal?
- A
Configure 802.1Q VLAN tagging on the Direct Connect connection.
- B
Use a Virtual Private Gateway (VGW) to terminate the Direct Connect connection.
- C
Set up a custom route table in the VPC to route traffic to the appropriate subnets.
- D
Use AWS Transit Gateway to handle routing between VLANs and VPC subnets.
- E
Ensure the on-premises router maps VLAN traffic to distinct BGP prefixes advertised to AWS.
Show answer and explanation
Correct answers: A, C, E
Explanation
To route traffic from specific VLANs on-premises to specific subnets in the VPC, you need to configure 802.1Q VLAN tagging on the Direct Connect connection to segment traffic. Additionally, the on-premises router should map VLAN traffic to distinct BGP prefixes that are advertised to AWS, enabling AWS to differentiate the traffic. Within the VPC, you must configure custom route tables to direct the incoming traffic to the appropriate subnets. A Virtual Private Gateway or AWS Transit Gateway is not required in this specific scenario since the routing can be managed with the provided tools.
- A. Correct.
Correct: 802.1Q VLAN tagging is required to differentiate traffic from different VLANs on the same physical connection.
- B. Incorrect.
Incorrect: While a VGW can terminate a Direct Connect connection, it does not support routing based on VLANs.
- C. Correct.
Correct: A custom route table in the VPC is needed to map incoming traffic to the appropriate subnets.
- D. Incorrect.
Incorrect: AWS Transit Gateway is not required for this setup. The routing can be handled using Direct Connect and VPC route tables.
- E. Correct.
Correct: The on-premises router must map VLANs to distinct BGP prefixes to differentiate traffic and ensure proper routing to the VPC.