ANS-C01 Question 191
Single answerYour company has deployed a hybrid cloud architecture with an on-premises data center connected to your AWS VPC through a Site-to-Site VPN. The VPN connection is experiencing high latency due to the geographic distance between your data center and AWS. To improve performance, you are tasked with optimizing the VPN connection. Which solution would best address this issue?
- A
Enable VPN acceleration with AWS Global Accelerator.
- B
Configure a second Site-to-Site VPN tunnel for redundancy.
- C
Use AWS Direct Connect with a transit gateway for low-latency communication.
- D
Enable Accelerated Site-to-Site VPN.
Show answer and explanation
Correct answer: D
Explanation
Accelerated Site-to-Site VPN uses AWS Global Accelerator's global edge network to optimize the routing of VPN traffic, significantly improving performance for long-distance connections. This solution directly addresses the latency issue while continuing to use the existing VPN setup. Other options either address different problems (e.g., redundancy) or involve entirely different services (e.g., AWS Direct Connect).
- A. Incorrect.
AWS Global Accelerator optimizes traffic routing for applications but does not directly apply to Site-to-Site VPN connections. It cannot be used for VPN acceleration.
- B. Incorrect.
Adding a second Site-to-Site VPN tunnel improves redundancy and availability but does not address latency issues caused by geographic distance.
- C. Incorrect.
AWS Direct Connect provides a dedicated connection between on-premises and AWS, reducing latency. However, it is a completely different service from Site-to-Site VPN and involves additional setup and costs, which may not be the desired solution here.
- D. Correct.
Enabling Accelerated Site-to-Site VPN utilizes AWS Global Accelerator's edge locations to route VPN traffic more efficiently, reducing latency for geographically distant connections. This is the correct solution.