Examtopics

AWS Certified Advanced Networking - Specialty

  • Topic 1 Question 139

    A company has an AWS environment that includes multiple VPCs that are connected by a transit gateway. The company has decided to use AWS Site-to-Site VPN to establish connectivity between its on-premises network and its AWS environment.

    The company does not have a static public IP address for its on-premises network. A network engineer must implement a solution to initiate the VPN connection on the AWS side of the connection for traffic from the AWS environment to the on-premises network.

    Which combination of steps should the network engineer take to establish VPN connectivity between the transit gateway and the on-premises network?

    3 つ選択

    • Configure the Site-to-Site VPN tunnel options to use Internet Key Exchange version 1 (IKEv1).

    • Configure the Site-to-Site VPN tunnel options to use Internet Key Exchange version 2 (IKEv2).

    • Use a private certificate authority (CA) from AWS Private Certificate Authority to create a certificate.

    • Use a public certificate authority (CA) from AWS Private Certificate Authority to create a certificate.

    • Create a customer gateway. Specify the current dynamic IP address of the customer gateway device’s external interface.

    • Create a customer gateway without specifying the IP address of the customer gateway device.

    シャッフルモード