Examtopics

AWS Certified Advanced Networking - Specialty
  • Topic 1 Question 252

    A company is migrating its internet VPN connections to dedicated AWS Direct Connect connections. The company needs to set up the Direct Connect connections so that all network communications are encrypted in transit.

    Which combination of steps will meet this requirement?

    3 つ選択
    • Create new Direct Connect connections while requesting MACsec ports.

    • Create a MACsec Connectivity Association Key Name (CKN) and Connectivity Association Key (CAK) pair. Associate the pair with each new connection.

    • Update the on-premises routers to use MACsec and the shared Connectivity Association Key Name (CKN) and Connectivity Association Key (CAK) pair.

    • Create a shared key for an IPsec connection.

    • Configure a new Direct Connect gateway. Associate the shared key with the new Direct Connect gateway.

    • Set up IPsec on the on-premises router. Associate the shared key with the IPsec configuration.


    シャッフルモード