ANS-C01 Question 437
Single answerYou are designing a hybrid network architecture for a company that needs to connect its on-premises data center to AWS. The company requires low latency and high bandwidth connectivity, as well as consistent network performance. Security is a top priority, and data must not traverse the public internet. Which solution best meets these requirements?
- A
Use AWS Direct Connect with a private virtual interface (VIF) to establish a dedicated connection between the on-premises data center and an Amazon VPC.
- B
Use a VPN connection over the internet to securely connect the on-premises data center to an Amazon VPC.
- C
Use AWS Global Accelerator to route traffic over the AWS backbone network for improved performance and security.
- D
Use AWS Transit Gateway with an internet gateway to connect the on-premises data center to multiple VPCs.
Show answer and explanation
Correct answer: A
Explanation
The company requires a private, secure, low-latency solution for connecting its on-premises data center to AWS. AWS Direct Connect with a private virtual interface (VIF) is the best option because it establishes a dedicated, private network connection that bypasses the public internet, ensuring consistent performance and meeting the security requirements.
- A. Correct.
Correct. AWS Direct Connect with a private VIF provides a dedicated, private connection that ensures low latency, high bandwidth, and security, as data does not traverse the public internet.
- B. Incorrect.
Incorrect. While a VPN connection is secure, it operates over the public internet and cannot guarantee low latency or high bandwidth connectivity.
- C. Incorrect.
Incorrect. AWS Global Accelerator improves performance for internet-based applications but does not provide a private, dedicated connection for hybrid networking.
- D. Incorrect.
Incorrect. AWS Transit Gateway simplifies connectivity between multiple VPCs and on-premises environments, but using it with an internet gateway would still route traffic over the public internet, which does not meet the requirements.