ANS-C01 Question 405
Select 2Your company needs to establish a cost-effective and secure connection between an on-premises data center and an Amazon VPC for periodic data transfers. The data transfer requirements are low and do not justify the need for a dedicated physical connection. Which connectivity options should you explore?
- A
AWS Direct Connect
- B
Site-to-Site VPN over the internet
- C
AWS PrivateLink
- D
AWS Transit Gateway with Site-to-Site VPN
- E
VPC Peering
Show answer and explanation
Correct answers: B, D
Explanation
For low data transfer needs, Site-to-Site VPN over the internet is a cost-effective and secure option to connect an on-premises data center to a VPC. If there is a need to manage multiple VPN connections efficiently, AWS Transit Gateway combined with Site-to-Site VPN could be employed for scalable and centralized connectivity. AWS Direct Connect, while highly reliable, is not cost-effective for low traffic, and the other options (AWS PrivateLink and VPC Peering) do not address on-premises connectivity.
- A. Incorrect.
AWS Direct Connect is a dedicated physical connection between on-premises and AWS. While highly secure and reliable, it is not cost-effective for low data transfer needs.
- B. Correct.
Site-to-Site VPN over the internet is a cost-effective and secure option for connecting on-premises to a VPC when data transfer requirements are relatively low.
- C. Incorrect.
AWS PrivateLink is used to privately access services hosted on AWS without exposing them to the public internet. It is not suitable for connecting on-premises environments to a VPC.
- D. Correct.
AWS Transit Gateway with Site-to-Site VPN can consolidate and manage multiple VPN connections cost-effectively. It is a viable and scalable option when low-cost connectivity is required for multiple VPCs and on-premises environments.
- E. Incorrect.
VPC Peering connects two VPCs to enable communication between them. It cannot be used for connecting on-premises environments to a VPC.