ANS-C01 Question 500
Select 2Your company has established an AWS Direct Connect connection to improve network performance and reduce latency between your on-premises data center and AWS. For additional security over this connection, you want to configure a VPN. Which of the following considerations are correct when setting up VPN connectivity over Direct Connect?
- A
You must configure a Virtual Private Gateway (VGW) or a Transit Gateway (TGW) in your AWS environment to terminate the VPN connection.
- B
A public virtual interface (Public VIF) is required to enable VPN connectivity over Direct Connect.
- C
The VPN traffic between your on-premises environment and AWS will be encrypted by IPsec.
- D
The private virtual interface (Private VIF) cannot be used with a VPN over Direct Connect.
- E
The Direct Connect connection provides redundancy for the VPN in case of failure.
Show answer and explanation
Correct answers: A, C
Explanation
To establish a VPN connection over Direct Connect, you need a Virtual Private Gateway (VGW) or Transit Gateway (TGW) in your AWS environment to terminate the VPN. The VPN traffic is encrypted using the IPsec protocol to ensure data security. A Private VIF is commonly used for connectivity to private AWS resources, and a Public VIF is not required. It is important to note that Direct Connect itself does not provide redundancy for VPN connections; they are separate technologies with different purposes.
- A. Correct.
Correct. A Virtual Private Gateway (VGW) or a Transit Gateway (TGW) is required in AWS to terminate a VPN connection. This is a foundational part of setting up VPN connectivity over Direct Connect.
- B. Incorrect.
Incorrect. A public virtual interface (Public VIF) is not required for VPN connectivity over Direct Connect. A Private VIF is typically used for connecting to private VPC resources.
- C. Correct.
Correct. VPN traffic is encrypted using the IPsec protocol, which ensures data security over the Direct Connect connection.
- D. Incorrect.
Incorrect. A Private VIF is commonly used in conjunction with VPN over Direct Connect to provide private connectivity to VPC resources.
- E. Incorrect.
Incorrect. Direct Connect does not provide redundancy for VPN connections. Direct Connect and VPN are complementary but separate technologies, and you would need to implement additional redundancy measures for both.