SCS-C02 Question 231
Single answerYour organization is planning to establish a secure and reliable connection between its on-premises data center and AWS to support a latency-sensitive application. Compliance requirements mandate that the connection should not traverse the public internet. Which connectivity option should you choose?
- A
AWS Site-to-Site VPN
- B
AWS Direct Connect
- C
AWS Global Accelerator
- D
AWS Transit Gateway
Show answer and explanation
Correct answer: B
Explanation
AWS Direct Connect is the best solution for this scenario as it establishes a private, dedicated network connection between the on-premises environment and AWS. This ensures compliance requirements are met by avoiding public internet traversal and provides low-latency connectivity suitable for latency-sensitive applications.
- A. Incorrect.
AWS Site-to-Site VPN establishes a secure connection over the public internet, which does not meet the compliance requirement of avoiding public internet traversal.
- B. Correct.
AWS Direct Connect provides a private, high-speed, and low-latency connection that does not traverse the public internet, making it ideal for compliance-driven and latency-sensitive applications.
- C. Incorrect.
AWS Global Accelerator improves performance for public-facing applications by routing traffic through the AWS global network but does not provide private connectivity between on-premises and AWS.
- D. Incorrect.
AWS Transit Gateway is used for interconnecting multiple VPCs or VPN connections but does not provide direct connectivity between on-premises data centers and AWS without leveraging other services like AWS Direct Connect or VPN.