AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 265

Question

A company has an AWS environment that includes multiple VPCs that are connected by a transit gateway. The company wants to use a certificate-based AWS Site-to-Site VPN connection to establish connectivity between an on-premises environment and the AWS environment. The company does not have a static public IP address for the on-premises environment. Which combination of steps should the company take to establish VPN connectivity between the transit gateway and the on-premises environment? (Choose two.)

Accepted Answer

Correct answer: B, E. The correct answer is B, E. Option B: Create a private certificate in AWS Certificate Manager (ACM). Option E: Create a customer gateway. Do not specify the IP address of the customer gateway device. AWS Certificate Manager provisions and renews TLS certificates automatically.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 265