ANS-C01 Question 497
Single answerYour company has set up an AWS Direct Connect connection to establish a private network link between your on-premises data center and AWS. However, you need to enable secure communication between your on-premises network and an Amazon VPC over this Direct Connect connection. What should you do to achieve this setup?
- A
Create a Virtual Private Gateway in your VPC and establish an IPsec VPN connection over the Direct Connect connection.
- B
Enable VPC peering between your on-premises network and the Amazon VPC.
- C
Use a Transit Gateway to connect your Direct Connect connection to the Amazon VPC without encryption.
- D
Configure a private virtual interface (VIF) on the Direct Connect connection and route traffic to the VPC.
Show answer and explanation
Correct answer: A
Explanation
Direct Connect provides a dedicated connection between your on-premises network and AWS, but it does not include encryption. To enable secure communication, you need to set up an IPsec VPN connection. By creating a Virtual Private Gateway in your VPC and establishing this VPN over the Direct Connect connection, you achieve the required encryption to secure data transfer.
- A. Correct.
Correct. By creating a Virtual Private Gateway in the VPC and establishing an IPsec VPN connection over the Direct Connect connection, you ensure secure communication. The VPN adds encryption, which Direct Connect alone does not provide.
- B. Incorrect.
Incorrect. VPC peering is used to connect two VPCs, not an on-premises network to a VPC. It is not relevant in this scenario.
- C. Incorrect.
Incorrect. While you can use a Transit Gateway to connect Direct Connect to a VPC, it does not provide encryption. Without an additional VPN, the connection is not secure.
- D. Incorrect.
Incorrect. A private virtual interface (VIF) allows you to route traffic over Direct Connect, but it does not provide encryption. A VPN is needed for secure communication.