ANS-C01 Question 392
Select 2You are designing a hybrid cloud architecture for an organization that requires high availability and low latency for its on-premises applications accessing resources in AWS. The company has a Direct Connect connection in place and uses a private virtual interface (VIF). Additionally, they want to ensure automatic failover should the Direct Connect connection fail. Which configuration would best meet these requirements?
- A
Establish a VPN connection over the internet as a backup and configure BGP for route failover.
- B
Use AWS Direct Connect Gateway to enable multi-region access with automatic failover.
- C
Configure a second Direct Connect connection in a different AWS Direct Connect location for redundancy.
- D
Enable AWS Global Accelerator to route traffic via alternate paths during Direct Connect outages.
- E
Set up a Transit Gateway and attach both Direct Connect and VPN connections for dynamic routing.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure high availability and low latency, you should implement a backup VPN connection for redundancy and configure BGP to handle route failover dynamically. Additionally, provisioning a second Direct Connect connection in a separate location adds another layer of redundancy, ensuring continuity even if one Direct Connect connection fails. These configurations together meet the organization's requirements for high availability and low latency.
- A. Correct.
Establishing a VPN connection over the internet as a backup and configuring BGP for route failover ensures there is an alternate path in case of a Direct Connect failure. BGP can dynamically reroute traffic to the VPN connection as needed.
- B. Incorrect.
Using AWS Direct Connect Gateway does not provide automatic failover; it is used for enabling multi-region access to VPCs, not for redundancy.
- C. Correct.
Configuring a second Direct Connect connection in a different AWS Direct Connect location provides a highly available and redundant setup. This ensures low latency and continuity even if one Direct Connect connection fails.
- D. Incorrect.
AWS Global Accelerator cannot directly manage failover between Direct Connect and VPN connections. It is primarily used to provide low-latency routing for internet-facing applications.
- E. Incorrect.
Transit Gateway can facilitate routing between Direct Connect and VPN, but it is not directly responsible for failover mechanisms. BGP is the protocol responsible for dynamic failover routing.