SAP-C02 Question 598
Select 3A company has on-premises data centers and wants to securely connect them to resources in multiple AWS Regions using private connections. The company also requires DNS resolution for its hybrid architecture to resolve on-premises and AWS-hosted resources seamlessly. Which combination of AWS services can meet these requirements?
- A
AWS Direct Connect
- B
AWS Site-to-Site VPN
- C
Amazon Route 53 Resolver
- D
AWS Global Accelerator
- E
AWS Transit Gateway
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirements of secure private connectivity and DNS resolution in a hybrid architecture, the solution must include AWS Direct Connect for private connections, Amazon Route 53 Resolver for DNS resolution across environments, and AWS Transit Gateway to manage and simplify the network architecture. While AWS Site-to-Site VPN is an alternative for secure connections, it does not provide the same level of performance as Direct Connect. AWS Global Accelerator is unrelated to private connectivity or hybrid DNS resolution.
- A. Correct.
AWS Direct Connect provides a dedicated private connection between on-premises data centers and AWS resources. This is ideal for high-bandwidth, low-latency connectivity.
- B. Incorrect.
AWS Site-to-Site VPN enables secure communication between on-premises and AWS over the internet. However, it is not a private high-bandwidth solution like Direct Connect.
- C. Correct.
Amazon Route 53 Resolver enables hybrid DNS resolution, allowing on-premises and AWS resources to resolve each other's domain names seamlessly.
- D. Incorrect.
AWS Global Accelerator is used to improve application availability and performance by routing traffic globally, but it does not address private connectivity or hybrid DNS resolution.
- E. Correct.
AWS Transit Gateway simplifies network connectivity by acting as a hub to connect VPCs, on-premises networks, and Direct Connect. In this scenario, it can help manage the hybrid architecture.