About This Flashcard Deck
This flashcard deck contains 10 cards covering key Hybrid Networking concepts for the ANS-C01 exam. Test your knowledge of Direct Connect, VPN, hybrid DNS, BGP, and on-premises to AWS connectivity patterns. Use active recall by attempting to answer each question before revealing the answer. Research shows that flashcard-based active recall is one of the most effective study techniques for certification exams.
Question
What is the difference between dedicated and hosted Direct Connect?
Click to reveal answer
Answer
Dedicated: physical port (1/10/100G) owned by you at DX location. Hosted: capacity from a partner on their port (50M–10G), faster provisioning.
Click to flip back
All Hybrid Networking Flashcards
Q: What is the difference between dedicated and hosted Direct Connect?
A: Dedicated: physical port (1/10/100G) owned by you at DX location. Hosted: capacity from a partner on their port (50M–10G), faster provisioning.
Q: What does a Direct Connect Gateway do?
A: Global resource that connects a DX connection to VPCs (via VGW) or Transit Gateways in any region. Does NOT enable VPC-to-VPC routing.
Q: How does BGP route preference work with DX and VPN?
A: DX preferred over VPN (lower MED/AS-path). For multiple DX paths: shortest AS-path → lowest MED → oldest connection. Local preference overrides all.
Q: What is VPN CloudHub?
A: Multiple VPN connections to a single VGW enables site-to-site communication through AWS (hub-and-spoke). Low-cost alternative to private WAN.
Q: What is accelerated Site-to-Site VPN?
A: VPN traffic enters the nearest AWS edge location (Global Accelerator) instead of traversing public internet. Improves performance for distant on-prem sites.
Q: What are Route 53 Resolver inbound endpoints for?
A: Allow on-premises DNS resolvers to query AWS private hosted zones. Creates ENIs in VPC that accept inbound DNS queries from on-prem.
Q: What are Route 53 Resolver outbound endpoints for?
A: Allow AWS resources to resolve on-premises domain names. Forwards DNS queries matching forwarding rules to on-prem DNS servers.
Q: What is LAG in Direct Connect?
A: Link Aggregation Group bundles multiple DX connections (same bandwidth, same location) into a single logical connection for higher throughput.
Q: What is MACsec on Direct Connect?
A: Layer 2 encryption (IEEE 802.1AE) available on 10G and 100G dedicated connections. Encrypts frames between your router and the AWS device.
Q: How do you achieve maximum resiliency for Direct Connect?
A: Two connections at two separate DX locations. Each location connects to different on-prem routers. Provides resilience against device, connection, and location failures.