ANS-C01 Question 464
Single answerYou are designing a hybrid cloud architecture for an organization that requires secure and low-latency communication between their on-premises data center and an Amazon VPC. The organization has a high volume of data transfer requirements and wants to ensure consistent network performance. Which of the following options will best meet these requirements?
- A
Use a VPN connection over the public internet, with traffic encrypted using IPsec.
- B
Establish a Direct Connect connection between the on-premises data center and the VPC.
- C
Use AWS Global Accelerator to route traffic between the on-premises data center and the VPC.
- D
Deploy an AWS Transit Gateway to manage connectivity between the data center and the VPC.
Show answer and explanation
Correct answer: B
Explanation
For the described hybrid cloud architecture, AWS Direct Connect is the optimal choice. It provides a private, dedicated connection between an on-premises data center and an Amazon VPC, ensuring low latency, consistent performance, and high bandwidth for large-scale data transfer. VPNs over the public internet cannot guarantee these performance characteristics, and while Transit Gateway and Global Accelerator offer other benefits, they do not directly solve the specified requirements.
- A. Incorrect.
While a VPN connection over the public internet provides encryption and secure communication, it does not guarantee low latency or consistent performance, especially for high-volume data transfer.
- B. Correct.
AWS Direct Connect provides a dedicated, private network connection between the on-premises data center and AWS, offering low latency, high bandwidth, and consistent performance, ideal for the described use case.
- C. Incorrect.
AWS Global Accelerator is primarily used for improving the availability and performance of applications globally. It does not establish direct connectivity between on-premises and a VPC.
- D. Incorrect.
Although AWS Transit Gateway simplifies network connectivity for multiple VPCs and on-premises networks, it is not a solution for achieving low latency and consistent performance. Transit Gateway often works in conjunction with other services like Direct Connect.