SAP-C02 Question 10
Select 3Your company operates a hybrid cloud environment with applications hosted on both AWS and an on-premises data center. The on-premises applications need to communicate with AWS services over a secure and consistent network connection. Additionally, for disaster recovery purposes, AWS services should failover to a secondary AWS Region if the primary Region becomes unavailable. Which combination of network connectivity strategies would best meet these requirements?
- A
Establish a Direct Connect connection between the on-premises data center and the primary AWS Region, and configure a backup VPN connection.
- B
Use AWS Global Accelerator to route traffic between the on-premises data center and AWS Regions.
- C
Enable VPC peering between the primary and secondary AWS Regions to facilitate disaster recovery.
- D
Set up a secondary Direct Connect connection to the secondary AWS Region for failover.
- E
Implement AWS Transit Gateway to manage connectivity between the on-premises data center and multiple AWS Regions.
Show answer and explanation
Correct answers: A, D, E
Explanation
To meet the requirements of secure and consistent connectivity between the on-premises data center and AWS, Direct Connect with a backup VPN provides high-bandwidth and redundant connections. For disaster recovery, a secondary Direct Connect ensures failover to a secondary Region. AWS Transit Gateway facilitates centralized and scalable management of hybrid and multi-Region connectivity, making it a key component of the overall architecture.
- A. Correct.
Establishing a Direct Connect connection ensures a secure, high-bandwidth connection between the on-premises data center and AWS. A backup VPN provides redundancy in case the Direct Connect becomes unavailable, fulfilling the requirement for secure and consistent connectivity.
- B. Incorrect.
AWS Global Accelerator is used to improve application availability and performance but does not provide direct connectivity between an on-premises data center and AWS Regions.
- C. Incorrect.
VPC peering is a point-to-point connection between two VPCs. It does not provide the scalability or centralized management needed for disaster recovery across multiple Regions.
- D. Correct.
Setting up a secondary Direct Connect to the secondary AWS Region ensures that there is a reliable failover path for disaster recovery, meeting the requirement for network redundancy.
- E. Correct.
AWS Transit Gateway simplifies and scales the management of hybrid connectivity between on-premises data centers and multiple AWS Regions. It is particularly useful for handling complex network architectures.