Your company plans to set up an AWS Direct Connect Connection and a VPN connection as a backup. If the AWS Direct Connect connection fails, then the traffic should be routed on the VPN line. What can be done to ensure this failover happens as smoothly as possible?

Answer options:

A.In AWS Direct Connect, make the VPN as the secondary device.
B.In AWS VPN, make AWS Direct Connect the primary device.
C.Enable Bidirectional Forwarding Detection.
D.Disable BGP Routing.

Answer – C
The AWS Documentation mentions the following.
Bidirectional Forwarding Detection (BFD) is a network fault detection protocol that provides fast failure detection times, facilitating faster re-convergence time for dynamic routing protocols. It is independent of media, routing protocol, and data. We recommend enabling BFD when configuring multiple AWS Direct Connect connections or when configuring a single AWS Direct Connect connection and a VPN connection as a backup to ensure fast detection and failover. You can configure BFD to detect link or path failures and update dynamic routing as Direct Connect quickly terminates BGP peering so that backup routes can kick in.
Options A and B are incorrect since these are not valid options.
Option D is incorrect since we need to establish Border Gateway Protocol (BGP) peering for dynamically routed Site-to-Site VPN connections.
For more information on BFD and VPN, please refer to the below URL:
https://docs.aws.amazon.com/directconnect/latest/UserGuide/create-vif.html
https://aws.amazon.com/vpn/faqs/