SAA-C03 Question 541
Single answerA company wants to establish a secure network connection between their on-premises data center and their AWS environment. They require high bandwidth and low latency for their workloads. Which option best meets their requirements?
- A
Set up an AWS Site-to-Site VPN connection
- B
Use an AWS Direct Connect connection
- C
Use Amazon CloudFront with a public endpoint
- D
Configure a VPC peering connection
Show answer and explanation
Correct answer: B
Explanation
AWS Direct Connect is the best option for establishing a secure, high-bandwidth, low-latency connection between an on-premises data center and AWS. It bypasses the public internet, providing a dedicated connection that meets the company's performance requirements. Other options like Site-to-Site VPN rely on the internet and may not provide the same level of performance, while CloudFront and VPC peering are not relevant for this use case.
- A. Incorrect.
An AWS Site-to-Site VPN connection is secure and cost-effective, but it relies on the internet, which may introduce higher latency and inconsistent performance compared to a dedicated connection.
- B. Correct.
AWS Direct Connect provides a dedicated, private connection between the on-premises environment and AWS. It offers high bandwidth and low latency, making it ideal for scenarios where performance is critical.
- C. Incorrect.
Amazon CloudFront is a content delivery network (CDN) that improves the delivery of static and dynamic web content but does not facilitate private or dedicated connectivity between on-premises and AWS.
- D. Incorrect.
VPC peering is used to connect two VPCs privately within AWS. It does not provide connectivity between an on-premises data center and AWS.