ANS-C01 Question 498
Select 3Your company has established an AWS Direct Connect connection between its on-premises data center and AWS. For enhanced security, you need to set up a VPN connection over the Direct Connect link to encrypt data in transit. Which of the following requirements must be met to successfully configure this setup?
- A
A Virtual Private Gateway (VGW) must be attached to the VPC.
- B
A Customer Gateway (CGW) must be configured in the on-premises data center.
- C
The on-premises router must support BGP (Border Gateway Protocol).
- D
The Direct Connect connection must have a private virtual interface (Private VIF).
- E
The VPN connection must use static routing instead of dynamic routing.
Show answer and explanation
Correct answers: A, B, D
Explanation
To set up a VPN connection over Direct Connect, a Virtual Private Gateway (VGW) is needed to terminate the VPN connection on the AWS side, while a Customer Gateway (CGW) is needed to represent the on-premises router. Additionally, the Direct Connect connection must use a private virtual interface (Private VIF) to connect to the VPC. While routing can be static or dynamic, dynamic routing is often preferred for flexibility, but it is not a strict requirement.
- A. Correct.
Correct: A Virtual Private Gateway (VGW) is required to terminate the VPN connection on the AWS side, which is necessary for VPN over Direct Connect.
- B. Correct.
Correct: A Customer Gateway (CGW) is required to represent your on-premises device that terminates the VPN connection at your data center.
- C. Incorrect.
Incorrect: While BGP is often used for routing with Direct Connect, it is not a mandatory requirement for VPN over Direct Connect. Static routing can also be used.
- D. Correct.
Correct: A private virtual interface (Private VIF) is required to establish the Direct Connect connection to the VPC for private communication.
- E. Incorrect.
Incorrect: Both static and dynamic routing (using BGP) are supported for VPN connections over Direct Connect. Dynamic routing is often preferred for scalability.