Question

Difficulty: HardAWS Network Services

A media streaming company is planning to deploy a globally distributed application across multiple AWS Regions. The architecture team has established two specific requirements:

1. Route global client traffic to the AWS Region that offers the lowest latency, with automatic redirection to an alternate region if the primary region becomes unhealthy.
2. Establish a dedicated, private physical network connection from the company's on-premises offices to AWS, bypassing the public internet entirely.

Which two AWS network services or features should the company select to meet these requirements?

  1. Amazon Route 53Answer
  2. AWS Direct ConnectAnswer
  3. C
    VPC Peering
  4. D
    Network Access Control Lists (Network ACLs)
  5. E
    Amazon CloudWatch

Answer

Amazon Route 53 and AWS Direct Connect
Amazon Route 53 and AWS Direct Connect are the correct choices. Amazon Route 53 is a highly available and scalable Domain Name System (DNS) service that can route end-users to the nearest AWS Region using latency-based routing, while also performing health checks to fail over to a healthy region. AWS Direct Connect establishes a dedicated, private physical network connection from an on-premises facility directly to AWS, bypassing the public internet entirely.

Step-by-Step Solution

1
Analyze the first requirement: routing global client traffic to the nearest AWS Region based on lowest latency, with automatic failover.
Amazon Route 53 is identified as the correct service because it supports latency-based routing policies and DNS health checks to automatically redirect traffic away from unhealthy regions.
Ensures that global users experience low latency and high availability.
2
Analyze the second requirement: establishing a dedicated, private physical connection from on-premises offices to AWS, bypassing the public internet.
AWS Direct Connect is identified as the correct service because it links an on-premises network directly to an AWS Direct Connect location over a dedicated physical network cable, completely bypassing the public internet.
Meets the requirement for private, consistent, and secure hybrid network connectivity.
3
Evaluate and eliminate the incorrect options.
VPC Peering is eliminated as it only connects VPCs to each other. Network ACLs are eliminated as they function as subnet-level firewalls. Amazon CloudWatch is eliminated as it is a monitoring service.
Verifies that none of the distractors meet the specified requirements.

Key Concept

AWS Network Services
Estimated Time:2m 0s
Rate this question