Examkin

Question

Difficulty: MediumAWS Network Services

An organization needs to establish a dedicated, private network connection from their on-premises office to their AWS VPC. The connection must bypass the public internet to ensure consistent network performance and lower latency. However, due to budget constraints during the transition phase, they also require a cost-effective, quick-to-implement backup connection that runs over the public internet. Which combination of AWS network services best meets these requirements?

  1. AWS Direct Connect as the primary connection and AWS Site-to-Site VPN as the backup connectionAnswer
  2. B
    AWS Transit Gateway as the primary connection and VPC Peering as the backup connection
  3. C
    AWS Site-to-Site VPN as the primary connection and Network Access Control Lists (Network ACLs) as the backup connection
  4. D
    AWS Direct Connect as the primary connection and Amazon CloudWatch as the backup connection

Answer

AWS Direct Connect as the primary connection and AWS Site-to-Site VPN as the backup connection
The correct answer combines AWS Direct Connect (for the dedicated, private, low-latency connection that bypasses the public internet) and AWS Site-to-Site VPN (for the fast, cost-effective backup connection over the public internet). This is a standard hybrid architecture pattern that balances performance, cost, and high availability.

Step-by-Step Solution

1
Analyze the primary connection requirement: a dedicated, private connection to AWS that bypasses the public internet for consistent performance.
AWS Direct Connect is identified as the correct service because it establishes a dedicated physical network connection from on-premises to AWS without using the public internet.
AWS Direct Connect provides predictable network performance and low latency by routing traffic over dedicated physical lines.
2
Analyze the backup connection requirement: a cost-effective, fast-to-implement connection that runs over the public internet.
AWS Site-to-Site VPN is identified as the correct backup service because it establishes an IPsec VPN tunnel over the public internet, which is quick to set up and cost-effective.
A VPN provides a secure tunnel over the public internet, acting as an excellent secondary path if the primary Direct Connect line fails.

Key Concept

AWS hybrid connectivity options, specifically distinguishing between dedicated physical connections (Direct Connect) and internet-based secure tunnels (VPN) for on-premises integration.
Rate this question

Topics

AWS Network Services

More questions from this topic