AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 25

An organization will be extending its existing on-premises infrastructure into the cloud. The design consists of a transit VPC that contains stateful firewalls that will be deployed in a highly available configuration across two Availability Zones for automatic failover.
What MUST be configured for this design to work? (Choose two.)

Answer options

• A. A different Autonomous System Number (ASN) for each firewall
• B. Border Gateway Protocol (BGP) routing
• C. Autonomous system (AS) path prepending
• D. Static routing
• E. Equal-cost multi-path routing (ECMP)

Correct answer: B, C

Explanation

The correct answers are B and C because BGP routing is necessary for dynamic routing between the on-premises infrastructure and the cloud, enabling seamless communication. AS path prepending (C) helps control the routing paths and can optimize the routing decisions, while the other options do not provide the necessary dynamic routing capabilities or optimizations required for this cloud extension design.