ANS-C01 Question 62
Single answerYou are designing a hybrid architecture for your organization where on-premises resources need to communicate with applications hosted in AWS. The solution must ensure low latency, high availability, and secure connectivity over a private link. Which solution would best meet these requirements?
- A
Use AWS Direct Connect with a private virtual interface (VIF) to establish a dedicated network connection.
- B
Use a Site-to-Site VPN between your on-premises network and AWS.
- C
Use AWS Global Accelerator to route traffic between on-premises and AWS resources.
- D
Use an internet-based connection with security groups to restrict access.
Show answer and explanation
Correct answer: A
Explanation
When designing a hybrid architecture with requirements for low latency, high availability, and secure communication, AWS Direct Connect with a private virtual interface is the optimal choice. It bypasses the public internet, offering a dedicated and reliable connection. Other solutions like VPNs or internet-based connections do not meet all the specified requirements, and AWS Global Accelerator is not relevant for hybrid connectivity.
- A. Correct.
This is the correct answer. AWS Direct Connect with a private VIF provides a dedicated, low-latency, and reliable connection between your on-premises network and AWS. It ensures private communication without traversing the public internet.
- B. Incorrect.
While a Site-to-Site VPN can provide secure connectivity, it relies on the public internet and may introduce latency and availability challenges, making it suboptimal for this scenario.
- C. Incorrect.
AWS Global Accelerator is designed for improving the performance of global applications, but it is not intended for hybrid connectivity between on-premises and AWS resources.
- D. Incorrect.
An internet-based connection with security groups does not ensure low latency or high availability, as it relies on the unpredictable nature of the public internet.