ANS-C01 Question 193
Single answerYour organization has deployed a critical application in an AWS VPC, and you need to establish a secure, low-latency, encrypted connection between your on-premises data center and the VPC. However, your on-premises infrastructure is located far from the AWS Region hosting the VPC, causing high latency. Which solution would best meet your requirements?
- A
Use a Site-to-Site VPN with AWS Direct Connect
- B
Use an Accelerated Site-to-Site VPN
- C
Use an internet-based Site-to-Site VPN
- D
Use a Transit Gateway with a Site-to-Site VPN
Show answer and explanation
Correct answer: B
Explanation
An Accelerated Site-to-Site VPN is the best solution when you need a secure, low-latency, and encrypted connection over long distances. It leverages AWS Global Accelerator to optimize traffic flow between your on-premises data center and AWS, reducing latency compared to traditional internet-based VPN solutions. Other options either lack acceleration or do not address the latency challenges effectively.
- A. Incorrect.
Combining a Site-to-Site VPN with AWS Direct Connect can reduce latency and improve performance, but this option does not use acceleration and may still result in higher latency if the Direct Connect location is far from the AWS Region.
- B. Correct.
An Accelerated Site-to-Site VPN uses AWS Global Accelerator to reduce latency by routing traffic through AWS's global network. This is the best option for secure, low-latency connections over long distances.
- C. Incorrect.
An internet-based Site-to-Site VPN can provide encryption, but it does not address latency issues caused by long distances between on-premises infrastructure and the AWS Region.
- D. Incorrect.
Using a Transit Gateway with a Site-to-Site VPN can simplify network management and scaling, but it does not inherently reduce latency or use acceleration mechanisms like AWS Global Accelerator.