ANS-C01 Question 367
Select 2You are designing a hybrid cloud architecture for an organization that requires secure and highly available communication between its on-premises data center and AWS. The organization wants to ensure low-latency connectivity, support for dynamic routing, and automatic failover in case of a connection failure. Which of the following approaches should you implement?
- A
Establish a single Direct Connect connection with a private virtual interface (VIF) between the on-premises data center and AWS.
- B
Set up a Site-to-Site VPN connection as a backup to an AWS Direct Connect connection with Border Gateway Protocol (BGP) configured for dynamic routing.
- C
Use multiple Direct Connect connections in a Link Aggregation Group (LAG) across different AWS Direct Connect locations.
- D
Implement AWS Direct Connect Gateway to connect multiple VPCs in different AWS Regions to the on-premises data center.
- E
Establish multiple Site-to-Site VPN connections using different customer gateways for redundancy.
Show answer and explanation
Correct answers: B, C
Explanation
To meet the organization's requirements for secure, highly available, and low-latency communication, you need to combine AWS Direct Connect with a backup solution. Option 2 ensures redundancy and automatic failover by using a Site-to-Site VPN with BGP. Option 3 improves availability and latency with multiple Direct Connect connections in a LAG. These combined solutions align with best practices for hybrid cloud architectures, ensuring both dynamic routing and fault tolerance.
- A. Incorrect.
A single Direct Connect connection does not provide redundancy. If the connection fails, there is no backup to maintain connectivity, violating the requirement for high availability.
- B. Correct.
Using a Site-to-Site VPN as a backup to Direct Connect and configuring BGP ensures automatic failover and dynamic routing, meeting the requirements for both security and high availability.
- C. Correct.
Multiple Direct Connect connections in a Link Aggregation Group (LAG) across different locations ensure high availability and low latency while supporting dynamic routing, fulfilling the stated requirements.
- D. Incorrect.
While AWS Direct Connect Gateway allows connecting multiple VPCs across regions to the on-premises data center, it does not directly address the need for redundancy or failover in case of connection failure.
- E. Incorrect.
Establishing multiple Site-to-Site VPN connections can provide redundancy, but it does not offer the low latency of Direct Connect, making it unsuitable as a primary solution for this use case.