ANS-C01 Question 194
Single answerYour organization has deployed a hybrid architecture with an on-premises data center connected to an Amazon VPC using a Site-to-Site VPN. To improve the performance and reduce latency for globally distributed users accessing on-premises resources through the VPN, which approach would you take?
- A
Enable AWS Global Accelerator and associate it with your Site-to-Site VPN endpoint.
- B
Use AWS Direct Connect instead of the Site-to-Site VPN for dedicated connectivity.
- C
Enable Accelerated Site-to-Site VPN by attaching the VPN to an AWS Global Accelerator endpoint.
- D
Set up multiple VPN connections in different AWS Regions to distribute traffic.
Show answer and explanation
Correct answer: C
Explanation
Accelerated Site-to-Site VPN is designed to improve performance and reduce latency for VPN traffic by leveraging AWS Global Accelerator. This feature allows traffic to take advantage of AWS's global network backbone, ensuring an optimized path between on-premises resources and the AWS cloud. Other options either do not directly address the performance improvement requirement or are unrelated to Accelerated VPN.
- A. Incorrect.
AWS Global Accelerator does not directly support Site-to-Site VPN. It is primarily used for improving performance of internet-based traffic to applications running in AWS.
- B. Incorrect.
While AWS Direct Connect provides dedicated connectivity with lower latency and increased bandwidth, it is a different solution from Accelerated VPN and does not address the specific requirement to optimize global access for a Site-to-Site VPN setup.
- C. Correct.
Accelerated Site-to-Site VPN uses AWS Global Accelerator to optimize the routing of VPN traffic by leveraging the AWS global network backbone, reducing latency and improving performance for globally distributed users.
- D. Incorrect.
Setting up multiple VPN connections in different AWS Regions can increase redundancy, but it does not directly address the requirement to reduce latency and improve performance for globally distributed users.