Your Company Has Installed an AWS Direct Connect Connection in an Ap-Southeast-1

question 277

Multiple Choice

Your company has installed an AWS Direct Connect connection in an ap-southeast-1 Direct Connect location. A public virtual interface is configured through a router to a dedicated firewall. You advertise your company's public /24 CIDR block to AWS with AS 65500. The company maintains a separate, corporate Internet firewall to map all outbound traffic to a single IP. This firewall maintains a BGP relationship with an upstream Internet provider that has delegated the public IP block your company uses. When the BGP session for the public virtual interface is up, corporate network users cannot access Amazon S3 resources in the ap-southeast-1 region. Which step should you take to provide concurrent AWS and Internet access?

• A) Configure AS-PATH prepending for the public virtual interface.
• B) Advertise a host route for the corporate firewall on the public virtual interface.
• C) Advertise a host route for the corporate firewall to the upstream Internet provider.
• D) NAT the traffic destined for AWS from the dedicated firewall using the public virtual interface.

---

Definitions:

Per Capita

A statistical measure expressed as the average per person for a given area, such as income per capita.

Distributing

The process of delivering or spreading out goods, services, or resources from a central point to multiple recipients or locations.

Estate

The total of all the property, assets, and debts left by an individual at death, or the property entrusted to an individual during their lifetime.

Trust

(1) A business arrangement in which stock owners appoint beneficiaries and place their securities with a trustee, who manages the company and pays a share of the earnings to the stockholders. (2) An estate-planning arrangement whereby a person transfers property to another person and the property is used for the benefit of a third person.