SAP-C02 Question 594
Select 2A company has an on-premises data center connected to AWS via AWS Direct Connect. The company also has multiple branch offices that need secure connectivity to both AWS and the on-premises data center. The branch offices do not have Direct Connect connections and are connected via the internet. The company wants to ensure consistent low-latency connectivity to AWS services and secure communication between the branch offices and the on-premises data center. Which solution should the company implement?
- A
Set up an AWS Site-to-Site VPN between the branch offices and AWS, and configure VPN routing to the on-premises data center through AWS.
- B
Leverage AWS Transit Gateway to connect AWS Direct Connect, VPN connections from branch offices, and the on-premises data center.
- C
Use Route 53 to create private DNS records for the branch offices to resolve AWS service endpoints.
- D
Configure Direct Connect Gateway to enable communication between the branch offices and AWS.
- E
Deploy AWS Global Accelerator to improve the performance of branch office traffic to AWS.
Show answer and explanation
Correct answers: A, B
Explanation
To meet the requirements of secure and low-latency connectivity, the company needs a solution that integrates AWS, the on-premises data center, and branch offices. Setting up AWS Site-to-Site VPN provides secure connectivity for the branch offices, and AWS Transit Gateway ensures efficient routing between Direct Connect, VPNs, and the on-premises network. Other options, such as Route 53, Direct Connect Gateway, or Global Accelerator, do not directly address the connectivity and security requirements for this scenario.
- A. Correct.
This is correct. By setting up an AWS Site-to-Site VPN, the branch offices can securely connect to AWS, and VPN routing can be configured to allow communication with the on-premises data center via AWS.
- B. Correct.
This is correct. AWS Transit Gateway provides a hub-and-spoke architecture that simplifies routing between Direct Connect, Site-to-Site VPNs, and other networks. It ensures secure and efficient connectivity between all components.
- C. Incorrect.
This is incorrect. Route 53 private DNS is used for resolving private DNS names but does not address the network connectivity or security requirements for branch offices.
- D. Incorrect.
This is incorrect. Direct Connect Gateway is used to connect multiple VPCs across regions or to on-premises networks, but it does not directly facilitate connectivity for branch offices connecting over the internet.
- E. Incorrect.
This is incorrect. AWS Global Accelerator improves performance for public-facing applications but does not address secure connectivity or low-latency routing for branch offices.