SAP-C02 Question 7
Select 2Your company hosts a multi-tier web application in AWS. The application is deployed across multiple Availability Zones in a VPC and uses an Application Load Balancer (ALB) to distribute traffic to EC2 instances in an Auto Scaling group. The application must connect securely to an on-premises database over a highly available network connection. Latency and bandwidth are critical considerations. Which combination of steps would you take to meet these requirements?
- A
Establish a Direct Connect connection between your on-premises environment and AWS.
- B
Use a VPN connection over the public internet to connect your VPC to the on-premises environment.
- C
Configure a Direct Connect gateway to allow access to multiple VPCs in your account.
- D
Enable AWS Transit Gateway to manage connectivity between on-premises and AWS resources.
- E
Deploy a NAT gateway in the VPC for outbound connectivity to the on-premises environment.
Show answer and explanation
Correct answers: A, C
Explanation
To meet the requirements of high availability, low latency, and high bandwidth for connecting the VPC to an on-premises database, using AWS Direct Connect is the most appropriate solution. Additionally, a Direct Connect gateway allows for scalability across multiple VPCs, enabling a more efficient and robust design. VPN connections over the public internet and NAT gateways do not satisfy the latency and bandwidth criteria, while AWS Transit Gateway is not necessary for the specific use case of hybrid connectivity in this scenario.
- A. Correct.
Direct Connect provides a dedicated, private, high-bandwidth, and low-latency connection between your on-premises environment and AWS, which is suitable for critical applications requiring consistent performance.
- B. Incorrect.
A VPN connection over the public internet does not provide the low latency and high bandwidth required by the scenario. It may be suitable for less critical workloads or as a backup to Direct Connect.
- C. Correct.
A Direct Connect gateway allows you to share a single Direct Connect connection across multiple VPCs, ensuring a scalable and efficient architecture for hybrid connectivity.
- D. Incorrect.
While AWS Transit Gateway is a useful service for managing complex network architectures, it is not required in this scenario because the focus is on connecting the on-premises environment to AWS, which can be achieved with Direct Connect and a Direct Connect gateway.
- E. Incorrect.
A NAT gateway is used for enabling outbound internet access for instances in a private subnet and is not relevant to establishing secure, low-latency connectivity between AWS and on-premises resources.