AWS Certified Advanced Networking – Specialty (ANS-C01) — Question 129

A company hosts its IT infrastructure in an on-premises data center. The company wants to migrate the infrastructure to the AWS Cloud in phases. A network engineer wants to set up a 10 Gbps AWS Direct Connect dedicated connection between the on-premises data center and VPCs. The company's network provider needs 3 months to provision the Direct Connect connection.

In the meantime, the network engineer implements a temporary solution by deploying an AWS Site-to-Site VPN connection that terminates to a virtual private gateway. The network engineer observes that the bandwidth of the Site-to-Site VPN connection is capped at 1.25 Gbps despite a powerful customer gateway device.

What should the network engineer do to improve the VPN connection bandwidth before the implementation of the Direct Connect connection?

Answer options

Correct answer: D

Explanation

The correct answer is D because creating a transit gateway allows for a more scalable and efficient way to manage multiple Site-to-Site VPN connections, enabling the use of ECMP routing to aggregate the bandwidth of all connections. Options A and B do not address the limitations of the existing VPN setup, while option C, although it suggests creating multiple connections, does not leverage the benefits of a transit gateway which is designed for such scenarios.