Which combination of steps will meet these requirements?
(Choose two.)
Update the 1 Gbps Direct Connect connection to 10 Gbps.
Advertise the on-premises network prefixes over the transit VIF.
Advertise the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF.
Update the Direct Connect connection’s MACsec encryption mode attribute to must_encrypt.
Associate a MACsec Connection Key Name/Connectivity Association Key (CKN/CAK) pair with the Direct Connect connection.
Explanations:
Updating the Direct Connect connection to 10 Gbps is not necessary to meet the requirement of connecting to VPC resources over a transit VIF. A 1 Gbps connection is sufficient for this architecture.
Advertising the on-premises network prefixes over the transit VIF is necessary for the on-premises infrastructure to route traffic to the connected VPCs through the transit gateway. This allows the on-premises network to recognize the VPC prefixes.
Advertising the VPC prefixes from the Direct Connect gateway to the on-premises network over the transit VIF is essential to enable the on-premises infrastructure to route traffic to the VPC resources, ensuring proper connectivity.
Updating the Direct Connect connection’s MACsec encryption mode to must_encrypt is not relevant to establishing the required connectivity and does not impact the ability to connect to VPC resources over a transit VIF.
Associating a MACsec CKN/CAK pair is not required to fulfill the connectivity requirements specified for the Direct Connect connection in this scenario. MACsec is an optional feature for encryption and does not affect the basic connectivity setup.
In my experience, the answer is:
Advertise the on-premises network prefixes over the transit VIF.