ANS-C01 Question 129
Select 2Your company wants to establish a reliable and secure connection between its on-premises data center and an Amazon VPC for hybrid cloud operations. The on-premises network requires low-latency communication with the VPC, and the company wants to avoid using the public internet for this connection. Additionally, due to compliance requirements, the connection must support encryption while maintaining high throughput. Which combination of solutions would best meet these requirements?
- A
Use AWS Direct Connect with a Site-to-Site VPN overlay for encryption.
- B
Use AWS Direct Connect with a private VIF (Virtual Interface) for low-latency and high-throughput communication.
- C
Use an AWS Site-to-Site VPN connection over the public internet for encryption.
- D
Use a Transit Gateway to aggregate multiple VPN connections for redundancy.
- E
Use AWS Direct Connect Gateway to connect multiple VPCs and on-premises networks.
Show answer and explanation
Correct answers: A, E
Explanation
The combination of AWS Direct Connect with a Site-to-Site VPN overlay provides a dedicated, low-latency, high-throughput connection while ensuring encryption for compliance. Additionally, AWS Direct Connect Gateway facilitates connectivity between multiple VPCs and on-premises networks, enhancing scalability and reliability for hybrid cloud operations.
- A. Correct.
This is correct. AWS Direct Connect provides a dedicated, low-latency, high-throughput connection, and adding a Site-to-Site VPN overlay ensures encryption for compliance requirements.
- B. Incorrect.
This is incorrect. While a private VIF on Direct Connect offers low-latency and high-throughput, it does not inherently provide encryption, which fails to meet the compliance requirements.
- C. Incorrect.
This is incorrect. A VPN over the public internet can provide encryption but does not fulfill the low-latency or high-throughput requirements.
- D. Incorrect.
This is incorrect. While a Transit Gateway can help manage multiple connections, it does not directly address the encryption, low-latency, or high-throughput requirements of the scenario.
- E. Correct.
This is correct. AWS Direct Connect Gateway enables connectivity between multiple VPCs and on-premises networks, which is essential for hybrid architectures requiring scalability and reliability.