A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being
advertised from the customer’s end, however the customer is unable to connect from EC2 instances inside its
VPC to servers residing in its datacenter.
Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)
A.
Add a route to the route table with an iPsec VPN connection as the target.
B.
Enable route propagation to the virtual pinnate gateway (VGW).
C.
Enable route propagation to the customer gateway (CGW).
D.
Modify the route table of all Instances using the ‘route’ command.
E.
Modify the Instances VPC subnet route table by adding a route back to the customer’s on-premises
environment.
B, E
http://www.aiotestking.com/amazon/which-of-the-following-options-provide-a-viable-solution-to-remedy-this-situation/
BE
B&E
refer: http://equizzing.com/amazon/which-of-the-following-options-provide-a-viable-solution-to-remedy-this-situation/
B is correct. DirectConnect uses the same virtual interface (the virtual gateway) that VPN would use. Enabling the route propagation to this device allows the VPC virtual router to see what networks are available in the data center and do dynamic routing to them.
C is incorrect. The customer gateway is part of VPN setup, not DirectConnect
D is incorrect. The only time you do routing from an instance in AWS is when that instance is a networking appliance (e.g. Cisco Cloud Services Router)
E is correct. This sends traffic bound for the data center to the interface that connects to the data center.