A start-up firm is planning to set up new hybrid connectivity using AWS Site-to-Site VPN. The Project Team working on setting up this connectivity has configured a Customer Gateway device with a public IP address. It is looking for a default option to bring up VPN tunnels for this new connectivity.
Which is the default option to bring VPN tunnels UP?

Answer options:

A.To bring VPN Tunnel UP, use a network tool at on-premises customer gateway device.
B.VPN Tunnels are UP automatically once a Customer Gateway device is configured with a Public IP address.
C.AWS should initiate IKE negotiations to bring Tunnel UP.
D.Customer Gateway should initiate IKE negotiations to bring Tunnel UP.

Correct Answer: D
For AWS Site-to-Site VPN, by default, Customer gateway devices initiate IKE negotiations to bring VPN Tunnels UP.
Option A is incorrect as an additional networking tool is not required to bring VPN tunnel UP.
Option B is incorrect as VPN Tunnels are not automatically UP when the Customer gateway is assigned with an IP address. Tunnels are UP when IKE negotiations are initiated from the customer gateway.
Option C is incorrect as AWS can initiate IKE negotiations. But this is not a default option.
For more information on initiating VPN Tunnels, refer to the following URL,
https://docs.aws.amazon.com/vpn/latest/s2svpn/initiate-vpn-tunnels.html