Which combination of steps will meet these requirements?
(Choose two.)
Update the 1 Gbps Direct Connect connection to 10 Gbps.
Advertise the on-premises network prefixes over the transit VIF.
Advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
Update the Direct Connect connection’s MACsec encryption mode attribute to must_encrypt.
Associate a MACsec Connection Key Name/Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
Explanations:
Updating the Direct Connect connection from 1 Gbps to 10 Gbps is not necessary to meet the requirements. The existing 1 Gbps connection is sufficient for connecting VPC resources over a transit VIF.
Advertising the on-premises network prefixes over the transit VIF is necessary to allow communication from the on-premises infrastructure to the VPC resources. This step enables routing of traffic between the on-premises network and the connected VPCs.
Advertising the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF is required for the on-premises infrastructure to reach the VPC resources. This step establishes the routing necessary for the connectivity.
Updating the Direct Connect connection’s MACsec encryption mode attribute to must_encrypt is not a requirement for establishing the connection or meeting the specified needs. MACsec is not mandated unless there are specific security compliance needs.
Associating a MACsec Connection Key Name/Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection is not necessary unless the connection is using MACsec for encryption. In this scenario, MACsec is not required to fulfill the connectivity requirements.
Based on what I know, the answer is:
Advertise the on-premises network prefixes over the transit VIF.
I outline that the answer is:
Advertise the on-premises network prefixes over the transit VIF.