A company needs to set up a VPN between AWS VPC and its on-premises network. A team creates a VPN connection in the AWS Management Console, downloads the configuration file, and installs it on the on-premises router. The tunnel is not coming up because of firewall restrictions on the router. Which two network traffic options should you allow through the firewall? (Choose two.)
A) UDP port 500
B) IP protocol 50
C) IP protocol 5
D) TCP port 50
E) TCP port 500

Question

Quizplus · Accepted Answer

UDP port 500 is used for IKE (Internet Key Exchange), which is responsible for establishing the VPN tunnel. IP protocol 50 is used for ESP (Encapsulating Security Payload), which is responsible for encrypting and decrypting the data that is sent over the VPN tunnel.

A Company Needs to Set Up a VPN Between AWS