ANS-C01 Question 127
Select 3Your company has a hybrid cloud architecture with an on-premises data center that needs to connect to resources in AWS. The company requires low-latency connectivity and high availability between the on-premises network and AWS. Additionally, the solution must support dynamic routing to accommodate potential changes in on-premises network configurations. Which connectivity option(s) should you design for this scenario?
- A
Establish an AWS Direct Connect connection with a redundant connection in another AWS Direct Connect location and enable Border Gateway Protocol (BGP).
- B
Use a Site-to-Site VPN connection over the internet with static routing for redundancy.
- C
Set up a Site-to-Site VPN connection as a backup to an AWS Direct Connect connection, both configured with BGP.
- D
Use AWS Transit Gateway to connect multiple VPCs and the on-premises network via a single AWS Direct Connect connection.
- E
Rely exclusively on AWS Direct Connect with no additional redundancy to minimize costs.
Show answer and explanation
Correct answers: A, C, D
Explanation
For this scenario, the best design involves using AWS Direct Connect for low-latency and high-bandwidth connectivity, with redundancy for high availability. Enabling BGP ensures dynamic routing to accommodate potential network changes. Additionally, setting up a backup VPN connection or leveraging AWS Transit Gateway adds redundancy and simplifies the architecture for connecting multiple VPCs to the on-premises network.
- A. Correct.
This option is correct as AWS Direct Connect provides low-latency, high-bandwidth connectivity. Using redundant connections in another AWS Direct Connect location ensures high availability. Enabling BGP supports dynamic routing for network changes.
- B. Incorrect.
While Site-to-Site VPN could provide connectivity, using static routing does not meet the requirement for dynamic routing and is not ideal for redundancy in this scenario.
- C. Correct.
This option is correct because setting up a Site-to-Site VPN connection as a backup ensures redundancy in case the AWS Direct Connect fails. Configuring both with BGP also supports the dynamic routing requirement.
- D. Correct.
This option is correct as AWS Transit Gateway can be used to simplify connectivity between multiple VPCs and the on-premises network. Combining it with AWS Direct Connect ensures low-latency connectivity, and its capability to work with BGP supports dynamic routing.
- E. Incorrect.
This option is incorrect as relying solely on a single AWS Direct Connect connection violates the high availability requirement. Redundancy is a critical component of the design.