SAP-C02 Question 596
Single answerA company is running a hybrid environment with an on-premises data center and AWS. The company has established a Site-to-Site VPN connection for secure communication with AWS. However, due to high network latency and inconsistent performance, they want to implement a more reliable and low-latency connection. Additionally, the company wants to route traffic between their on-premises environment and an Amazon VPC using private IP addresses. Which solution should the company implement?
- A
Use AWS Direct Connect and establish a private virtual interface to the Amazon VPC.
- B
Set up a second Site-to-Site VPN connection for redundancy and load balancing.
- C
Migrate the on-premises environment entirely to AWS to eliminate the need for a hybrid connection.
- D
Use AWS Global Accelerator to improve the performance of the Site-to-Site VPN connection.
Show answer and explanation
Correct answer: A
Explanation
AWS Direct Connect is the best solution for hybrid environments requiring low-latency and reliable network connections between on-premises data centers and AWS. By creating a private virtual interface, the company can securely route traffic using private IP addresses, which aligns with their requirements. Alternatives like adding redundancy to the VPN or using AWS Global Accelerator do not address the underlying need for consistent performance and low latency.
- A. Correct.
This is the correct answer. AWS Direct Connect provides a high-bandwidth, low-latency, and reliable network connection between on-premises environments and AWS. By establishing a private virtual interface, the company can route traffic using private IP addresses.
- B. Incorrect.
While setting up a second VPN connection could provide redundancy, it does not address the underlying issues with high latency and inconsistent performance. VPN connections still route traffic over the public internet, which is less reliable than AWS Direct Connect.
- C. Incorrect.
Migrating the on-premises environment entirely to AWS is a drastic measure that does not align with the company’s hybrid architecture requirement. It is not a feasible solution in this scenario.
- D. Incorrect.
AWS Global Accelerator is used to improve the performance of applications by routing traffic to the optimal AWS endpoint. It does not help in improving the performance of a Site-to-Site VPN connection.