ANS-C01 Question 30
Select 3Your company has a hybrid network architecture with an on-premises data center connected to AWS using a Direct Connect connection. You need to ensure that traffic between your on-premises network and your VPC in AWS always takes the most cost-effective path. Additionally, you want to provide fault tolerance by allowing traffic to failover to a backup VPN connection if the Direct Connect connection fails. Which combination of configurations should you implement to meet these requirements?
- A
Configure a Direct Connect Gateway and attach it to your VPC.
- B
Set up a VPN connection as a backup to the Direct Connect.
- C
Create a route in your VPC route table with a higher priority for the VPN connection over the Direct Connect.
- D
Use BGP to dynamically advertise on-premises routes over both the Direct Connect and the VPN.
- E
Configure AS_PATH Prepending on the VPN connection to make it less preferred than Direct Connect.
- F
Enable Multi-AZ for the Direct Connect connection to ensure high availability.
Show answer and explanation
Correct answers: B, D, E
Explanation
To meet the requirements of cost-effective routing and fault tolerance, you need to set up a backup VPN connection and use BGP for dynamic routing. Configuring AS_PATH Prepending ensures the Direct Connect is preferred while the VPN serves as a backup. A Direct Connect Gateway and Multi-AZ setup are not directly relevant to the specific needs of this scenario.
- A. Incorrect.
A Direct Connect Gateway is used to connect multiple VPCs across different regions or accounts, but it is not required to meet the specific requirements of cost-effectiveness and failover in this scenario.
- B. Correct.
A VPN connection is a common backup option for Direct Connect to ensure fault tolerance in case of Direct Connect failure.
- C. Incorrect.
The VPN connection should act as a backup path, so it should not have a higher priority than the Direct Connect. This option does not meet the requirement.
- D. Correct.
Using BGP allows dynamic route advertisement and failover between the Direct Connect and VPN, ensuring seamless traffic redirection in case of Direct Connect failure.
- E. Correct.
AS_PATH Prepending is a method to make one path (e.g., the VPN) less preferred than another (e.g., Direct Connect), which is necessary to ensure that traffic uses the Direct Connect when available.
- F. Incorrect.
Multi-AZ for Direct Connect is not a feature. While high availability can be achieved using multiple Direct Connect links, it is not directly relevant to the requirements of cost-effectiveness and failover in this scenario.