AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 277

An unfortunate situation has just come to your attention. A business critical application with sensitive data running on-prem will run out of storage disk space in
24hrs. This business critical application is dependent a very large set of routes `" required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re`"home the application. In order to complete the replication of application data and ensure the application remains operational beyond the next 24hrs, select the best implementation.

Answer options

• A. Within the new VPC ג€" establish a Direct Connect connection with max 10Gbps port speed for data replication. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
• B. Within the new VPC ג€" deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
• C. Within the new VPC ג€" deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
• D. Within the new VPC ג€" deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Correct answer: B

Explanation

Option B is correct because an IPsec VPN can be established in minutes, satisfying the urgent 24-hour migration requirement, unlike Direct Connect which takes weeks to provision. Dynamic routing using BGP is required to efficiently handle the very large set of routes needed for system integration. Additionally, Jumbo Frames are not supported over standard internet-based VPN connections, which invalidates options C and D.