ANS-C01 practice question 12 of 35

Your organization has a newly installed 1-Gbps AWS Direct Connect connection. You order the cross- connect from the Direct Connect location provider to the port on your router in the same facility. To enable the use of your first virtual interface, your router must be configured appropriately. What are the minimum requirements for your router?

Full set: 291 questions
Answer options
A: 1-Gbps Multi Mode Fiber Interface, 802.1Q VLAN, Peer IP Address, BGP Session with MD5.
B: 1-Gbps Single Mode Fiber Interface, 802.1Q VLAN, Peer IP Address, BGP Session with MD5. Correct answer
C: IPsec Parameters, Pre-Shared key, Peer IP Address, BGP Session with MD5
D: BGP Session with MD5, 802.1Q VLAN, Route-Map, Prefix List, IPsec encrypted GRE Tunnel
Correct Answer:
B. 1-Gbps Single Mode Fiber Interface, 802.1Q VLAN, Peer IP Address, BGP Session with MD5.
Explanation

To establish a 1-Gbps AWS Direct Connect connection, specific physical and logical configurations are required on the customer's router. Physically, AWS requires a 1-Gbps or 10-Gbps single-mode fiber optic interface (1000BASE-LX or 10GBASE-LR). Logically, each virtual interface (VIF) is isolated using an 802.1Q VLAN tag. A BGP session must be established to exchange routes, which requires configuring peer IP addresses (provided by AWS and the customer). For security, AWS recommends using BGP MD5 authentication. Option B correctly lists all these minimum requirements.

Why Incorrect

A. AWS specifies single-mode fiber for 1-Gbps dedicated connections, not multi-mode fiber.
C. IPsec parameters and pre-shared keys are used for VPN connections, not for a standard Direct Connect VIF.
D. Route maps and prefix lists are BGP policy tools, not minimum requirements to establish the VIF. An IPsec GRE tunnel is an optional overlay.

References

1. AWS Documentation, AWS Direct Connect User Guide. "Prerequisites for AWS Direct Connect", section "Technical requirements for dedicated connections". It explicitly states, "1 Gbps, 10 Gbps, or 100 Gbps single-mode fiber... 1000BASE-LX (1310 nm) for 1 Gbps Ethernet".

2. AWS Documentation, AWS Direct Connect User Guide. "Virtual interfaces", section "Public virtual interface prerequisites". It states, "A public or private ASN for your side of the BGP session... A new unused VLAN tag that you select... BGP MD5 authentication is supported."

3. AWS Documentation, AWS Direct Connect User Guide. "Routing policies and BGP communities". This document details BGP configuration, including peer IPs and authentication, which are fundamental to establishing the connection.

Scroll to Top