SAP-C02 Question 595
Select 2A global organization wants to connect its on-premises data centers in North America and Europe to the AWS Cloud, ensuring low latency, high bandwidth, and secure connectivity. Additionally, they want to use Route 53 to provide private DNS resolution for internal applications hosted in a VPC. Which combination of solutions should the organization implement?
- A
Use AWS Direct Connect to establish dedicated connections between the on-premises data centers and the AWS Cloud.
- B
Set up an AWS Site-to-Site VPN to connect the on-premises data centers to the AWS Cloud.
- C
Enable Route 53 Private Hosted Zones for the VPC and associate them with the relevant VPCs.
- D
Use AWS Global Accelerator to provide DNS resolution for private applications hosted in the VPC.
- E
Enable VPC peering to connect the on-premises data centers to the AWS Cloud.
Show answer and explanation
Correct answers: A, C
Explanation
To meet the organization's requirements for low latency, high bandwidth, and secure connectivity, AWS Direct Connect is the best choice for connecting on-premises data centers to the AWS Cloud. For private DNS resolution of internal applications, Route 53 Private Hosted Zones should be enabled and associated with the VPC. Site-to-Site VPN could be used as a backup, but it does not meet the stated performance requirements. AWS Global Accelerator and VPC peering are not relevant to this scenario.
- A. Correct.
Correct. AWS Direct Connect provides low latency, high bandwidth, and secure connectivity between on-premises data centers and the AWS Cloud. It is suitable for enterprise-grade workloads requiring consistent performance.
- B. Incorrect.
Incorrect. While Site-to-Site VPN can provide secure connectivity, it is not ideal for scenarios requiring low latency and high bandwidth compared to AWS Direct Connect.
- C. Correct.
Correct. Route 53 Private Hosted Zones allow the organization to create private DNS zones for internal applications and associate them with VPCs, ensuring private DNS resolution.
- D. Incorrect.
Incorrect. AWS Global Accelerator is designed for improving global application performance and availability, not for DNS resolution or private networking.
- E. Incorrect.
Incorrect. VPC peering is used for interconnecting VPCs, not for connecting on-premises infrastructures to the AWS Cloud.