Which combination of steps will meet these requirements?
(Choose two.)
Update the 1 Gbps Direct Connect connection to 10 Gbps.
Advertise the on-premises network prefixes over the transit VIF.
Advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
Update the Direct Connect connection’s MACsec encryption mode attribute to must_encrypt.
Associate a MACsec Connection Key Name/Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
Explanations:
Updating the Direct Connect connection from 1 Gbps to 10 Gbps is not necessary to meet the requirements. The existing 1 Gbps connection is sufficient for connecting VPC resources over a transit VIF.
Advertising the on-premises network prefixes over the transit VIF is necessary to allow communication from the on-premises infrastructure to the VPC resources. This step enables routing of traffic between the on-premises network and the connected VPCs.
Advertising the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF is required for the on-premises infrastructure to reach the VPC resources. This step establishes the routing necessary for the connectivity.
Updating the Direct Connect connection’s MACsec encryption mode attribute to must_encrypt is not a requirement for establishing the connection or meeting the specified needs. MACsec is not mandated unless there are specific security compliance needs.
Associating a MACsec Connection Key Name/Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection is not necessary unless the connection is using MACsec for encryption. In this scenario, MACsec is not required to fulfill the connectivity requirements.