AWS SAP-C02 · Question 16 · Domain 1.1: Network Connectivity
A company requires a hybrid network architecture. They have a 10 Gbps AWS Direct Connect connection. For compliance reasons, all traffic over the Direct Connect connection must be encrypted at the MAC level. How can this be achieved?
Answer options:
Establish an IPsec VPN over the Direct Connect connection.
Enable MACsec on the Direct Connect connection and use MACsec-capable routers on-premises.
Use AWS KMS to encrypt the Direct Connect virtual interfaces.
Implement TLS 1.3 for all applications using the connection.
75 questions · hints · full answers · grading