ANS-C01 Question 177
Single answerYou are configuring a hybrid architecture between your on-premises data center and AWS. Your on-premises environment requires access to an Amazon VPC over a secure, low-latency connection that does not traverse the public internet. The connection must support multiple VPCs in the same AWS Region without requiring additional physical connections. Which solution meets these requirements?
- A
Establish a Direct Connect connection and use a Direct Connect Gateway to connect to multiple VPCs.
- B
Create a VPN connection to each VPC using AWS Site-to-Site VPN.
- C
Configure a Transit Gateway and attach it to each VPC and your on-premises environment.
- D
Set up a single Direct Connect connection to one VPC and use VPC peering to connect to other VPCs.
Show answer and explanation
Correct answer: A
Explanation
The best solution for connecting an on-premises data center to multiple VPCs in a secure, low-latency manner is AWS Direct Connect with a Direct Connect Gateway. This setup enables you to extend a single Direct Connect connection to multiple VPCs in the same Region without requiring additional physical connections. Other options either do not meet the low-latency requirement or introduce unnecessary complexity.
- A. Correct.
Correct. AWS Direct Connect provides a dedicated, low-latency connection to AWS that does not traverse the public internet. Using a Direct Connect Gateway allows you to connect multiple VPCs in the same AWS Region to the same Direct Connect connection.
- B. Incorrect.
Incorrect. While AWS Site-to-Site VPN can provide a secure connection, it does not meet the low-latency requirement and requires a separate VPN connection for each VPC, increasing complexity.
- C. Incorrect.
Incorrect. While a Transit Gateway supports connecting multiple VPCs and on-premises environments, it does not inherently provide the secure, low-latency connection offered by Direct Connect.
- D. Incorrect.
Incorrect. VPC peering is not designed for hybrid architectures and would require traffic between VPCs to traverse the peering link, which does not fulfill the low-latency or secure connection requirements.