ANS-C01 Question 204
Select 2Your company is deploying a global SD-WAN solution and has decided to use AWS Transit Gateway Connect to integrate with its on-premises SD-WAN appliances. The SD-WAN appliances at different branch locations will connect to the Transit Gateway through AWS VPN connections. Which of the following statements are correct about configuring AWS Transit Gateway Connect for this use case? (Choose TWO)
- A
You must create a Transit Gateway Connect attachment to establish connectivity between the SD-WAN appliances and the Transit Gateway.
- B
Transit Gateway Connect requires you to use GRE tunnels to establish connectivity between the Transit Gateway and the SD-WAN appliances.
- C
Transit Gateway Connect automatically encrypts traffic between the Transit Gateway and the SD-WAN appliances without the need for additional configuration.
- D
You can use BGP to dynamically exchange routing information between the Transit Gateway and the SD-WAN appliances over the Connect attachment.
Show answer and explanation
Correct answers: A, D
Explanation
AWS Transit Gateway Connect is designed to integrate third-party SD-WAN appliances with AWS Transit Gateway. In this use case, the setup requires creating a Connect attachment to establish connectivity and using BGP for dynamic routing. GRE tunnels are optional but not mandatory, and encryption must be handled separately, such as by using AWS VPN. This ensures secure and efficient traffic management across the hybrid SD-WAN deployment.
- A. Correct.
Correct: Transit Gateway Connect requires a Connect attachment to integrate third-party SD-WAN appliances with the Transit Gateway.
- B. Incorrect.
Incorrect: While GRE tunnels are supported, they are not mandatory for establishing connectivity with Transit Gateway Connect. Instead, Connect attachments are required.
- C. Incorrect.
Incorrect: Transit Gateway Connect itself does not provide encryption. You would need to use AWS VPN or other encryption mechanisms for secure communication.
- D. Correct.
Correct: Transit Gateway Connect allows dynamic routing using BGP, enabling seamless exchange of routing information between the Transit Gateway and SD-WAN appliances.