ANS-C01 Question 179
Select 2Your company has an on-premises data center that needs to establish a highly available and low-latency connection to an Amazon VPC. The on-premises environment uses BGP for dynamic routing. Which combination of solutions should you implement to achieve this connectivity?
- A
Use AWS Direct Connect with a second Direct Connect connection in another AWS Region for failover.
- B
Set up a VPN connection over the internet as a backup to the Direct Connect connection.
- C
Configure a Direct Connect Gateway to allow for connections to multiple VPCs.
- D
Enable BGP routing on both the on-premises router and the AWS Direct Connect connection.
- E
Use a Transit Gateway to consolidate multiple VPN connections from the on-premises environment.
Show answer and explanation
Correct answers: B, D
Explanation
To implement a highly available and low-latency connection, Direct Connect is the primary solution. However, to meet high availability requirements, a VPN over the internet serves as a backup in case Direct Connect fails. Enabling BGP on both Direct Connect and the on-premises router ensures dynamic routing and failover between the Direct Connect and VPN connections.
- A. Incorrect.
Using a second Direct Connect connection in another AWS Region would not meet the requirement for low-latency connectivity. Cross-region connectivity introduces latency, making this option unsuitable.
- B. Correct.
Setting up a VPN over the internet as a backup provides failover capability in case the Direct Connect connection fails. While VPN connections have higher latency than Direct Connect, they ensure high availability.
- C. Incorrect.
A Direct Connect Gateway is useful for connecting multiple VPCs across regions but is not specifically required for establishing connectivity between the on-premises network and a single VPC in this scenario.
- D. Correct.
Enabling BGP routing on both the on-premises router and Direct Connect ensures dynamic routing and allows for automatic failover when combined with a backup VPN connection.
- E. Incorrect.
Using a Transit Gateway is beneficial for consolidating multiple VPC or on-premises connections but is not necessary in this scenario where the focus is on connecting one on-premises environment to one VPC.