ANS-C01 Question 59
Single answerYou are designing a hybrid network architecture for your company that spans AWS and an on-premises data center. The company requires low latency, consistent bandwidth, and secure connectivity between the AWS environment and the on-premises data center. Which of the following options would best meet these requirements?
- A
Establish a Site-to-Site VPN connection between AWS and the on-premises data center over the public internet
- B
Use AWS Direct Connect with a private VIF (Virtual Interface)
- C
Implement a Client VPN endpoint to connect users to AWS resources
- D
Use a combination of AWS Global Accelerator and public internet routing
Show answer and explanation
Correct answer: B
Explanation
AWS Direct Connect with a private VIF is the best solution for hybrid network connectivity when low latency, consistent bandwidth, and security are critical requirements. It provides a dedicated, private connection from the on-premises data center to AWS, bypassing the public internet and delivering predictable performance.
- A. Incorrect.
Site-to-Site VPN uses the public internet, which is prone to latency fluctuations and does not guarantee consistent bandwidth, making it unsuitable for the given requirements.
- B. Correct.
AWS Direct Connect provides a dedicated private connection between AWS and the on-premises data center, ensuring low latency, consistent bandwidth, and enhanced security, which directly meets the requirements.
- C. Incorrect.
Client VPN is designed for individual user access to AWS resources and is not suitable for establishing hybrid network connectivity between an on-premises data center and AWS.
- D. Incorrect.
AWS Global Accelerator is used to improve performance for global applications but does not establish secure or dedicated hybrid connectivity. Public internet routing does not guarantee low latency or consistent bandwidth.