AWS Solutions Architect Associate Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Study for the AWS Solutions Architect Associate Test with our engaging quizzes. Utilize flashcards and multiple-choice questions, each with hints and explanations to enhance your understanding. Get exam-ready today!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What is required to establish an Amazon VPC VPN connection?

  1. Public IP address for the NAT

  2. Static internet-routable IP for customer gateway

  3. Dynamically assigned IP for instances

  4. Dedicated VPN instance in VPC

The correct answer is: Static internet-routable IP for customer gateway

To establish an Amazon VPC VPN connection, a static, internet-routable IP address is required for the customer gateway. This is essential because the customer gateway represents the physical or software device on the client's side of the VPN connection, often located at their on-premises network. The static IP ensures that AWS can reliably connect to the customer gateway over the internet, facilitating a secure connection between the customer's network and the Amazon VPC. Using a static IP also ensures that the configuration remains consistent over time. If a dynamic IP were used, any change in that IP address would require reconfiguration of the VPN settings. This necessity for consistency is a key reason why a static IP address is mandated for proper connection establishment. In contrast, other options like a public IP address for the NAT, a dynamically assigned IP for instances, or a dedicated VPN instance are not necessary components for setting up the VPN connection. A dedicated VPN instance in VPC, for example, is not a requirement for establishing a VPN since you can utilize the existing virtual private gateway provided by AWS.