ANS-C01 Question 3
Select 2You are designing a hybrid network architecture for an enterprise that has an on-premises data center and multiple applications hosted in AWS. The on-premises data center connects to AWS using an AWS Direct Connect connection. The enterprise requires highly available connectivity with automatic failover in case the Direct Connect connection goes down. Additionally, the solution must minimize costs and provide consistent performance. Which combination of design choices meets these requirements?
- A
Use AWS Direct Connect for primary connectivity and configure a backup VPN connection over the internet.
- B
Set up two AWS Direct Connect connections in separate locations and enable BGP for route failover.
- C
Deploy an AWS Site-to-Site VPN connection as the primary connection and use AWS Direct Connect as a backup.
- D
Configure two AWS Direct Connect connections in Active/Active mode with Direct Connect Gateway.
- E
Enable AWS Global Accelerator to handle failover between the Direct Connect and VPN connections.
Show answer and explanation
Correct answers: A, B
Explanation
The best solution is to use AWS Direct Connect as the primary connection for high performance and consistent bandwidth, and configure a backup VPN connection over the internet for failover. Additionally, setting up two Direct Connect connections in separate locations with BGP routing ensures high availability and redundancy. These design choices align with the requirements of minimizing costs while ensuring automatic failover and consistent performance.
- A. Correct.
This option is correct as using AWS Direct Connect as the primary connection and a backup VPN over the internet provides high availability and cost efficiency. The VPN acts as a failover mechanism if Direct Connect becomes unavailable.
- B. Correct.
This option is correct because setting up two Direct Connect connections in separate locations ensures high availability and fault tolerance. BGP can be used to automatically route traffic via the alternate connection in case of a failure.
- C. Incorrect.
This option is incorrect because Site-to-Site VPN as the primary connection does not meet the requirement for consistent performance. Direct Connect provides dedicated bandwidth and lower latency compared to VPN.
- D. Incorrect.
This option is incorrect because using two Direct Connect connections in Active/Active mode increases costs unnecessarily and does not align with the requirement to minimize costs.
- E. Incorrect.
This option is incorrect because AWS Global Accelerator is not used for failover between Direct Connect and VPN connections. It is primarily designed for improving global application performance and availability.