ANS-C01 Question 403
Single answerYou are designing a cost-effective solution for transferring data between your on-premises environment and an Amazon VPC. The data transfer requirements are moderate, and your organization wants to avoid the cost of a dedicated physical connection. Which connectivity option would best meet these requirements?
- A
AWS Direct Connect
- B
AWS Site-to-Site VPN
- C
AWS Transit Gateway with Direct Connect attachment
- D
Internet Gateway with public IPs
Show answer and explanation
Correct answer: B
Explanation
For moderate data transfer needs between an on-premises environment and a VPC, AWS Site-to-Site VPN offers a secure and cost-effective solution. It leverages the internet to establish a VPN connection, avoiding the higher costs of dedicated physical connections like Direct Connect or the complexity of Transit Gateway. While an Internet Gateway with public IPs could technically enable data transfer, it lacks the security and encryption needed for such scenarios, making AWS Site-to-Site VPN the best choice.
- A. Incorrect.
AWS Direct Connect provides a dedicated physical connection for high-bandwidth, low-latency requirements. However, it is more expensive compared to other options, making it less suitable for cost-sensitive scenarios with moderate data transfer needs.
- B. Correct.
AWS Site-to-Site VPN is a cost-effective option for securely connecting an on-premises environment to an Amazon VPC over the internet. It is well-suited for moderate data transfer needs and avoids the higher costs of dedicated connections like Direct Connect.
- C. Incorrect.
AWS Transit Gateway with Direct Connect attachment is designed for large-scale and complex network architectures. It is more expensive and not necessary for moderate data transfer needs, making it a less cost-effective option in this scenario.
- D. Incorrect.
An Internet Gateway with public IPs can be used to transfer data over the public internet, but it lacks security features such as encryption, which are often required for connectivity between on-premises environments and VPCs. This makes it unsuitable for most production use cases.