SCS-C02 Question 230
Single answerYour company has an on-premises data center that requires a secure and consistent connection to AWS. The applications hosted on-premises need low-latency access to AWS services, and there is a requirement to transfer large volumes of data between the data center and AWS. Regulatory compliance also mandates that the connection should not traverse the public internet. Which is the most suitable connectivity option to meet these requirements?
- A
AWS VPN with Site-to-Site VPN configuration
- B
AWS Direct Connect with a private VIF (Virtual Interface)
- C
AWS Direct Connect with a public VIF (Virtual Interface)
- D
AWS Client VPN
- E
AWS Site-to-Site VPN over the internet
Show answer and explanation
Correct answer: B
Explanation
AWS Direct Connect with a private VIF is the most suitable option for this scenario. It provides a dedicated, private connection between the on-premises data center and AWS, meeting requirements for low latency, high-volume data transfer, and regulatory compliance by avoiding the public internet. Other options either rely on the public internet, are designed for different use cases, or do not provide the needed performance and security guarantees.
- A. Incorrect.
AWS VPN with Site-to-Site VPN configuration provides secure connectivity but relies on the public internet, which may introduce latency and does not meet the requirement for bypassing the public internet.
- B. Correct.
AWS Direct Connect with a private VIF establishes a dedicated, private network connection between your on-premises data center and AWS, addressing the need for low-latency, secure, and high-volume data transfer without using the public internet.
- C. Incorrect.
AWS Direct Connect with a public VIF provides access to public AWS services over the public internet, which does not meet the requirement to avoid the public internet for connectivity.
- D. Incorrect.
AWS Client VPN is designed for individual client connections rather than connecting an entire on-premises data center to AWS. It does not support high-volume data transfer or low-latency requirements.
- E. Incorrect.
AWS Site-to-Site VPN over the internet provides secure connectivity but uses the public internet, which introduces latency and does not satisfy the regulatory requirement to avoid the public internet.