SCS-C02 Question 228
Single answerYour organization needs to establish a secure and reliable connection between its on-premises data center and AWS. The connection must support consistent high throughput for transferring large volumes of data and a high level of encryption for compliance requirements. Which of the following options would best meet these requirements?
- A
AWS Direct Connect with MACsec encryption
- B
AWS Site-to-Site VPN
- C
AWS Direct Connect with VPN over it
- D
AWS Internet Gateway with HTTPS for secure data transfer
Show answer and explanation
Correct answer: A
Explanation
For high throughput and secure data transfer, AWS Direct Connect with MACsec encryption is the optimal choice. It offers a dedicated connection with consistent performance and encryption at the physical layer, meeting both the performance and compliance requirements described in the scenario. While other options provide secure data transfer, they either lack the reliability of a dedicated connection or the high throughput needed for large data transfers.
- A. Correct.
AWS Direct Connect with MACsec encryption provides a dedicated, high-throughput connection with encryption at the physical layer, making it an excellent choice for secure and reliable data transfer.
- B. Incorrect.
AWS Site-to-Site VPN is a secure option but may not provide the consistent high throughput required for transferring large volumes of data, as it relies on the public internet.
- C. Incorrect.
Using AWS Direct Connect with VPN over it could meet the encryption requirement, but it adds unnecessary complexity and may not be as suitable as Direct Connect with native MACsec encryption.
- D. Incorrect.
AWS Internet Gateway with HTTPS provides secure data transfer over the internet but lacks the reliability and consistent high throughput required for the described use case.