ANS-C01 Question 240
Select 2Your company is designing a hybrid cloud architecture where the on-premises data center communicates securely with resources in AWS. You are required to ensure high availability and fault tolerance for the connection between the data center and AWS. Which combination of options would best meet this requirement?
- A
Establish two AWS Direct Connect connections at different Direct Connect locations.
- B
Set up a single AWS Direct Connect connection with a VPN backup over the public internet.
- C
Use AWS Transit Gateway to aggregate multiple VPN connections from the on-premises data center to AWS.
- D
Enable Bidirectional Forwarding Detection (BFD) on Direct Connect connections to improve failover performance.
- E
Deploy multiple Site-to-Site VPN connections without using Direct Connect.
Show answer and explanation
Correct answers: A, D
Explanation
To achieve high availability and fault tolerance in a hybrid cloud setup, using multiple AWS Direct Connect connections at separate locations ensures redundancy. Enabling BFD further enhances failover performance by quickly detecting failures and switching to a healthy connection. While other options like VPN backups or Transit Gateway offer some redundancy, they do not provide the same level of performance and reliability as redundant Direct Connect connections.
- A. Correct.
Correct: Establishing two AWS Direct Connect connections at different locations ensures redundancy and high availability. If one connection or location fails, the other can handle the traffic.
- B. Incorrect.
Partially correct but not ideal: While a single Direct Connect with a VPN backup provides some redundancy, it does not offer the same level of fault tolerance as multiple Direct Connect connections.
- C. Incorrect.
Incorrect: AWS Transit Gateway can aggregate VPN connections but does not inherently provide high availability for hybrid connectivity in this scenario.
- D. Correct.
Correct: Enabling Bidirectional Forwarding Detection (BFD) on Direct Connect connections improves failover performance by detecting failures quickly and switching to the backup connection.
- E. Incorrect.
Incorrect: Multiple Site-to-Site VPN connections can provide redundancy, but they do not match the performance and reliability of Direct Connect for high-throughput, low-latency workloads.