ANS-C01 Question 349
Select 2An organization has multiple on-premises data centers and wants to establish highly available, low-latency connectivity between their on-premises network and multiple VPCs in different AWS regions. They also want the capability to route traffic between VPCs in different regions without using the public internet. Which combination of connectivity methods should they use?
- A
Use AWS Direct Connect with a Direct Connect Gateway to connect multiple VPCs across regions.
- B
Use AWS Transit Gateway to enable routing between VPCs and on-premises networks.
- C
Use multiple public Virtual Interfaces (VIFs) for inter-region VPC communication.
- D
Establish Site-to-Site VPN connections for each VPC to enable connectivity.
- E
Use VPC peering connections for inter-region communication between VPCs.
Show answer and explanation
Correct answers: A, B
Explanation
To achieve low-latency, highly available connectivity between on-premises data centers and multiple VPCs across AWS regions, the combination of AWS Direct Connect with a Direct Connect Gateway and AWS Transit Gateway is optimal. Direct Connect provides the private, low-latency connection to AWS, while Transit Gateway enables scalable routing between VPCs and on-premises networks without using the public internet. Other solutions like public VIFs, Site-to-Site VPNs, and VPC peering do not meet all the requirements of the scenario.
- A. Correct.
Correct. AWS Direct Connect with a Direct Connect Gateway allows you to connect multiple VPCs across regions to an on-premises network and ensures low-latency, private connectivity.
- B. Correct.
Correct. AWS Transit Gateway simplifies routing between VPCs and on-premises networks, and it supports inter-region VPC communication without using the public internet.
- C. Incorrect.
Incorrect. Public Virtual Interfaces (VIFs) are used for accessing AWS public services (e.g., S3, DynamoDB) over Direct Connect and do not support private VPC-to-VPC communication.
- D. Incorrect.
Incorrect. Site-to-Site VPN connections can connect an on-premises network to AWS, but they are not the best solution for low-latency and high availability, especially when connecting to multiple VPCs.
- E. Incorrect.
Incorrect. VPC peering enables inter-VPC communication, but it does not scale efficiently for connecting multiple VPCs across regions and does not involve on-premises networks directly.