ANS-C01 Question 4
Single answerYour organization is deploying a hybrid architecture where on-premises resources need to communicate securely and with low latency to AWS services in a specific region. The on-premises data center has a VPN connection to AWS, but during peak workloads, the VPN experiences high latency and bandwidth limitations. As a network architect, what is the most appropriate solution to address these challenges while maintaining secure connectivity?
- A
Set up AWS Direct Connect to establish a dedicated private connection between the on-premises data center and AWS.
- B
Increase the bandwidth of the existing VPN connection by using multiple VPN tunnels in a redundant configuration.
- C
Configure an AWS Global Accelerator to optimize the network path between the on-premises data center and the AWS region.
- D
Deploy a Transit Gateway to interconnect the on-premises data center and AWS services with higher performance.
Show answer and explanation
Correct answer: A
Explanation
The most appropriate solution for low latency and high bandwidth connectivity between on-premises resources and AWS is AWS Direct Connect. It establishes a dedicated, private network connection that bypasses the public internet, addressing the latency and bandwidth limitations of VPN connections. While other options may support certain network configurations, they do not offer the same level of performance and reliability as Direct Connect for this use case.
- A. Correct.
This is correct. AWS Direct Connect provides a dedicated, low-latency, and high-bandwidth connection between on-premises data centers and AWS. It is designed specifically to address the limitations of VPN connections in such scenarios.
- B. Incorrect.
This is incorrect. While using multiple VPN tunnels can provide redundancy, it does not effectively address bandwidth limitations or significantly reduce latency compared to a dedicated Direct Connect link.
- C. Incorrect.
This is incorrect. AWS Global Accelerator improves performance for internet-facing applications by directing traffic through AWS's global backbone network. It does not address the specific requirements of private connectivity between on-premises data centers and AWS.
- D. Incorrect.
This is incorrect. AWS Transit Gateway is used to simplify network connectivity between VPCs and on-premises networks, but it does not inherently resolve latency or bandwidth issues. It would still depend on the underlying VPN or Direct Connect for connectivity.