ANS-C01 Question 181
Select 3Your organization has established a hybrid architecture between its on-premises data center and AWS. You are tasked with ensuring high availability and fault tolerance for traffic flowing between the on-premises network and your AWS VPC. Currently, a Site-to-Site VPN is set up between the two networks, but it experiences latency and outages during peak traffic. To address this, you are planning to implement AWS Direct Connect with a backup mechanism. Which of the following steps would you take to achieve high availability and fault tolerance for your connectivity?
- A
Set up AWS Direct Connect with multiple connections in different locations for redundancy.
- B
Configure a Direct Connect Gateway to allow connectivity to multiple VPCs across regions.
- C
Use a single Direct Connect connection and enable Multi-AZ failover in the AWS Management Console.
- D
Configure a Site-to-Site VPN as a backup for the AWS Direct Connect connection.
- E
Enable Border Gateway Protocol (BGP) for dynamic failover between Direct Connect and the VPN.
Show answer and explanation
Correct answers: A, D, E
Explanation
To achieve high availability and fault tolerance between on-premises networks and AWS, it is recommended to use multiple Direct Connect connections in different locations for redundancy. Additionally, configuring a Site-to-Site VPN as a backup connection ensures connectivity when Direct Connect is unavailable. Dynamic routing using BGP is crucial for enabling automatic failover between Direct Connect and the VPN, providing seamless connectivity during outages or failures.
- A. Correct.
Correct: Setting up multiple Direct Connect connections in different locations ensures redundancy. In case one connection goes down, traffic can failover to the other connection.
- B. Incorrect.
Incorrect: While a Direct Connect Gateway allows connectivity to multiple VPCs, it does not directly contribute to high availability or fault tolerance for the on-premises connectivity.
- C. Incorrect.
Incorrect: AWS Direct Connect does not support Multi-AZ failover natively. High availability must be configured using multiple connections or a backup mechanism like VPN.
- D. Correct.
Correct: Setting up a Site-to-Site VPN as a backup ensures connectivity in case the Direct Connect connection fails.
- E. Correct.
Correct: Enabling BGP for dynamic routing allows automatic failover between the AWS Direct Connect connection and the Site-to-Site VPN.