ANS-C01 Question 105
Select 2You are designing a hybrid architecture that requires secure and reliable connectivity between your corporate data center and an Amazon VPC. The solution must ensure low latency, consistent performance, and encryption of data in transit. Which combination of solutions would best meet these requirements?
- A
Use AWS Direct Connect with MACsec encryption enabled
- B
Establish an IPsec VPN connection over AWS Direct Connect
- C
Use a Site-to-Site VPN over the public internet
- D
Implement AWS Global Accelerator to route traffic securely
- E
Enable VPC peering between the corporate data center and the VPC
Show answer and explanation
Correct answers: A, B
Explanation
To meet the requirements of secure, low-latency, and reliable connectivity, AWS Direct Connect is ideal for private and consistent performance. Adding MACsec encryption to Direct Connect ensures data in transit is encrypted. For additional encryption, Direct Connect can be combined with an IPsec VPN, providing a layered approach to security. Other options, like Site-to-Site VPN over the public internet or AWS Global Accelerator, do not meet all aspects of the requirements.
- A. Correct.
Correct. AWS Direct Connect with MACsec encryption provides a private, dedicated network connection with encryption for secure and consistent performance.
- B. Correct.
Correct. Combining Direct Connect with an IPsec VPN ensures both private connectivity and encryption, meeting the requirement for secure data in transit.
- C. Incorrect.
Incorrect. A Site-to-Site VPN over the public internet does not provide the low latency and consistent performance required for the scenario.
- D. Incorrect.
Incorrect. AWS Global Accelerator is designed for improving global application performance and does not provide point-to-point connectivity or encryption.
- E. Incorrect.
Incorrect. VPC peering is used for connecting VPCs within AWS and cannot be used to connect a corporate data center to an Amazon VPC.