ANS-C01 Question 318
Single answerA company is setting up a hybrid architecture to extend its on-premises network to AWS. The on-premises network uses a private IP address space, and the company wants to securely connect to its resources hosted in a VPC without exposing traffic to the public internet. They also require high availability and low latency for the connection. Which AWS service or configuration should the company choose?
- A
AWS Direct Connect with a private virtual interface
- B
AWS Transit Gateway with an internet gateway
- C
AWS VPN over the public internet
- D
AWS Global Accelerator
Show answer and explanation
Correct answer: A
Explanation
AWS Direct Connect with a private virtual interface is the best choice for this scenario because it creates a dedicated, private connection between the on-premises network and the VPC. This setup avoids using the public internet, offering higher security, lower latency, and more consistent performance compared to VPN or internet-based options.
- A. Correct.
AWS Direct Connect with a private virtual interface provides a dedicated, low-latency, and secure connection between an on-premises network and a VPC without using the public internet. It is ideal for hybrid architectures requiring high availability and consistent performance.
- B. Incorrect.
AWS Transit Gateway with an internet gateway involves routing traffic through the public internet, which does not meet the requirement for avoiding public exposure of traffic.
- C. Incorrect.
AWS VPN over the public internet is a secure option, but it does not provide the low latency and high availability needed for this scenario.
- D. Incorrect.
AWS Global Accelerator is used for improving performance for global applications by routing traffic through the AWS global network, but it does not establish a hybrid connection between on-premises and AWS resources.