ANS-C01 Question 393
Select 2Your organization has a hybrid cloud setup with resources hosted both on-premises and in an AWS VPC. You are tasked with ensuring secure communication between the on-premises environment and the VPC. The solution should support dynamic routing, allow for high availability, and ensure encrypted traffic. Which of the following AWS services should you use to achieve this setup?
- A
AWS Direct Connect
- B
AWS VPN
- C
AWS Transit Gateway
- D
AWS Global Accelerator
- E
AWS PrivateLink
Show answer and explanation
Correct answers: B, C
Explanation
To meet the requirements of encrypted traffic, dynamic routing, and high availability, AWS VPN in combination with AWS Transit Gateway is the optimal solution. AWS VPN provides secure, encrypted communication, while AWS Transit Gateway acts as a central hub for connecting on-premises and VPCs with high availability and support for dynamic routing protocols like BGP. Other options like Direct Connect or PrivateLink do not fully address the stated requirements.
- A. Incorrect.
While AWS Direct Connect provides a dedicated private connection between on-premises and AWS, it does not inherently provide encryption or dynamic routing. Additional configuration is required for these features.
- B. Correct.
AWS VPN supports encrypted communication and dynamic routing through the use of VPN tunnels and Border Gateway Protocol (BGP). It is suitable for secure connections between on-premises and AWS environments.
- C. Correct.
AWS Transit Gateway allows for high availability and simplifies connectivity by acting as a centralized hub for connecting multiple VPCs and on-premises networks. It supports dynamic routing and works well with AWS VPN to provide an encrypted connection.
- D. Incorrect.
AWS Global Accelerator is primarily used for improving the performance and availability of applications by routing traffic through the AWS global network. It is not designed for secure connectivity between on-premises and AWS.
- E. Incorrect.
AWS PrivateLink is used for privately accessing services hosted in AWS without exposing them to the public internet. It does not facilitate secure communication between on-premises and AWS environments.