ANS-C01 Question 192
Single answerYour company has deployed a mission-critical application in an Amazon VPC that needs to securely connect to an on-premises data center. The connection requires low latency and must handle a large amount of data transfer. To meet these requirements, you have decided to use an AWS Site-to-Site VPN. However, you are noticing inconsistent performance due to fluctuating internet conditions. What is the best solution to improve the performance of your VPN connection while maintaining security?
- A
Enable VPN acceleration by using AWS Global Accelerator.
- B
Switch to AWS Direct Connect for a dedicated connection.
- C
Use Accelerated VPN by enabling AWS Global Accelerator for your Site-to-Site VPN.
- D
Enable ECMP (Equal-Cost Multi-Path) routing to increase throughput.
Show answer and explanation
Correct answer: C
Explanation
The best solution to improve the performance of your Site-to-Site VPN connection while maintaining security is to use Accelerated VPN. By enabling AWS Global Accelerator for your VPN connection, traffic is routed through the AWS global network instead of the public internet, reducing latency and improving performance. This approach is specifically designed for scenarios where internet performance fluctuates and low latency is required.
- A. Incorrect.
AWS Global Accelerator is not directly used to accelerate VPN connections; it is used to improve performance for applications over the internet by routing traffic to the optimal endpoint.
- B. Incorrect.
While AWS Direct Connect provides a dedicated connection with consistent performance, this option does not involve using a VPN and would require additional setup and cost. It is not the best immediate solution.
- C. Correct.
Accelerated VPN leverages AWS Global Accelerator to improve the performance of your Site-to-Site VPN connections by routing traffic through the AWS global network, reducing latency and improving throughput.
- D. Incorrect.
Enabling ECMP routing can increase throughput by using multiple VPN tunnels, but it does not address the issue of inconsistent internet performance. It is not the most effective solution in this case.