VCP-VMC 2024 Question 134
Single answerAn organization is deploying a hybrid cloud architecture using VMware Cloud on AWS and their on-premises data center. They want to ensure secure connectivity between their on-premises workloads and VMware Cloud on AWS without relying on the public internet. Which connectivity option would best meet this requirement?
- A
Configure a VPN connection between the on-premises environment and VMware Cloud on AWS.
- B
Use AWS Direct Connect to establish a private, dedicated connection between the on-premises environment and VMware Cloud on AWS.
- C
Leverage VMware Managed Transit Gateway to route all traffic securely between on-premises and VMware Cloud on AWS.
- D
Set up a public endpoint on VMware Cloud on AWS for direct access by the on-premises environment.
Show answer and explanation
Correct answer: B
Explanation
The organization requires secure connectivity between their on-premises environment and VMware Cloud on AWS without relying on the public internet. While a VPN can provide encryption, it typically uses the public internet for data transmission. AWS Direct Connect is the optimal choice as it creates a private, dedicated connection, ensuring secure, reliable, and high-performance communication. VMware Managed Transit Gateway and public endpoints are not suitable for this specific scenario.
- A. Incorrect.
A VPN connection can provide secure connectivity, but it typically relies on the public internet for data transmission, which may not meet the organization's requirement of avoiding the public internet.
- B. Correct.
AWS Direct Connect provides a private, dedicated connection between the on-premises environment and VMware Cloud on AWS, ensuring secure and reliable connectivity without using the public internet.
- C. Incorrect.
VMware Managed Transit Gateway facilitates traffic routing between multiple clouds or regions but does not directly ensure private connectivity between on-premises and VMware Cloud on AWS.
- D. Incorrect.
Using a public endpoint on VMware Cloud on AWS would expose the environment to the public internet, which does not meet the organization's requirement for secure and private connectivity.