# AWS-Certified-Advanced-Networking---Specialty-ANS-C01 — Question 427

**Type:** multiple_response
**Topics:** topic_1

## Question

A company uses an AWS Direct Connect private VIF with a link aggregation group (LAG) that consists of two 10 Gbps connections. The company's security team has implemented a new requirement for external network connections to provide layer 2 encryption. The company's network team plans to use MACsec support for Direct Connect to meet the new requirement.

Which combination of steps should the network team take to implement this functionality? (Choose three.)

## Correct Answer

_See scenario._

## Explanation

Correct:A,B,E

To start using MACsec, you must turn the feature on when you create a dedicated connection
https://docs.aws.amazon.com/directconnect/latest/UserGuide/create-lag.html
https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-mac-sec-getting-started.html
https://docs.aws.amazon.com/directconnect/latest/UserGuide/associate-key-lag.html

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/amazon/AWS-Certified-Advanced-Networking---Specialty-ANS-C01/427  
Practice (tracked): https://hiexam.net/study/AWS-Certified-Advanced-Networking---Specialty-ANS-C01/practice