AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 101

Question

A company uses an AWS Direct Connect private VIF with a link aggregation group (LAG) that consists of two 10 Gbps connections. The company's security team has implemented a new requirement for external network connections to provide layer 2 encryption. The company's network team plans to use MACsec support for Direct Connect to meet the new requirement. Which combination of steps should the network team take to implement this functionality? (Choose three.)

Accepted Answer

Correct answer: A, B, E. The correct answer is A, B, E. Option A: Create a new Direct Connect LAG with new circuits and ports that support MACsec. Option B: Associate the MACsec Connectivity Association Key (CAK) and the Connection Key Name (CKN) with the new LAG. Option E: Configure the MACsec encryption mode on the new LAG. AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 101