Your organization has a newly installed 1-Gbps AWS Direct Connect connection. You order the cross- connect from the Direct Connect location provider…

To establish a 1-Gbps AWS Direct Connect virtual interface, specific physical, data link, and network layer configurations are required. The physical connection for 1 Gbps requires a 1000BASE-LX single-mode fiber interface. At the data link layer, IEEE 802.1Q VLAN tagging is mandatory to encapsulate traffic for each virtual interface. At the network layer, a Border Gateway Protocol (BGP) session must be established to exchange routing information. This requires configuring the peer IP addresses provided by AWS for the BGP session. For security, AWS mandates the use of MD5 authentication for all BGP sessions over a virtual interface. Option B correctly lists all these minimum requirements.

A. AWS specifies 1000BASE-LX single-mode fiber for 1-Gbps Direct Connect connections, not multi-mode fiber.

C. IPsec parameters are for establishing a VPN tunnel, which is not a minimum requirement for a standard Direct Connect virtual interface. This option also omits physical and data link layer requirements.

D. Route maps, prefix lists, and IPsec/GRE tunnels are advanced configurations or different architectures, not the minimum requirements needed to establish the initial BGP session for a virtual interface.

1. AWS Direct Connect User Guide, "Connection requirements": This official documentation specifies the physical connection details. For a 1 Gbps port speed, the required optics are "1000BASE-LX (1310 nm)" and the fiber type is "Single-mode". This supports the "1-Gbps Single Mode Fiber Interface" requirement and invalidates option A.

2. AWS Direct Connect User Guide, "Prerequisites for virtual interfaces": This section states, "Your network must support 802.1Q VLANs." This confirms the requirement for 802.1Q VLANs.

3. AWS Direct Connect User Guide, "Routing policies and BGP": This page details the routing configuration. It states, "AWS Direct Connect uses Border Gateway Protocol (BGP) to exchange routes..." and "We require BGP MD5 authentication." This confirms the need for a BGP session and MD5 authentication.

4. AWS Direct Connect User Guide, "Creating a public virtual interface" or "Creating a private virtual interface": In the configuration steps for any VIF, AWS requires you to provide "Your router peer IP" and "BGP authentication key", confirming the need for Peer IP addresses and the MD5 key for the BGP session.