A company runs a web application in the us-west-2 Region that serves global clients. Users… — AWS Certified Solutions Architect - Associate

A company runs a web application in the $us-west-2$ Region that serves global clients. Users in Europe are experiencing high latency due to TCP handshake overhead across the public internet. Additionally, the company's on-premises data center needs to transfer daily database backups of approximately $5\text{ GB}$ to an Amazon S3 bucket in the same Region. The on-premises transfer requires a minimum of $2\text{ Gbps}$ bandwidth over a secure connection, but the current network setup is unable to scale beyond $1.25\text{ Gbps}$ throughput. Which TWO configurations should a solutions architect implement to address the user latency and network throughput requirements?

Configure AWS Global Accelerator to route traffic to the application endpoint in the AWS Region, utilizing the AWS global network to reduce TCP connection latency for European users.Answer
Deploy an AWS Transit Gateway and establish multiple AWS Site-to-Site VPN connections, enabling Equal-Cost Multi-Path (ECMP) routing to scale the tunnel throughput for backup transfers.Answer
C
Deploy a single AWS Site-to-Site VPN connection with two active-active tunnels directly to a virtual private gateway to achieve an aggregate throughput of $2.5\text{ Gbps}$ for the backup transfers.
D
Configure Amazon Route 53 with latency-based routing to direct user traffic directly to the Application Load Balancer in the primary Region to minimize TCP handshake overhead.
E
Configure stateless Security Groups for the application servers and define explicit inbound and outbound rules to permit backup traffic only during off-peak hours.

Answer

Implementing AWS Global Accelerator to route European user traffic over the AWS global network, and deploying AWS Transit Gateway with multiple AWS Site-to-Site VPN connections enabling Equal-Cost Multi-Path (ECMP) routing to scale backup throughput.

The correct configuration combines AWS Global Accelerator and AWS Transit Gateway with ECMP. AWS Global Accelerator terminates TCP connections at edge locations close to European users and routes their traffic over the low-latency AWS global network, reducing latency and connection establishment time. AWS Transit Gateway enables Equal-Cost Multi-Path (ECMP) routing, allowing the aggregation of multiple VPN tunnels to scale network throughput beyond the standard

1.25\text{ Gbps}

limit to meet the

2\text{ Gbps}

requirement.

Step-by-Step Solution

Analyze the latency requirements for global users.

Identify that European users face TCP handshake latency over the public internet to the application in the primary Region.

Since the application is in a single Region, a service that terminates TCP connections at edge locations closer to the users, such as AWS Global Accelerator, is required to reduce latency.

Analyze the hybrid network connection throughput requirements.

Determine that the required throughput is at least

2\text{ Gbps}

for database backups, which exceeds the

1.25\text{ Gbps}

limit of a single VPN tunnel.

To scale VPN throughput beyond the single-tunnel limit, a transit gateway must be deployed to enable Equal-Cost Multi-Path (ECMP) routing across multiple active VPN tunnels.

Select the correct combination of network services.

Combine AWS Global Accelerator for global traffic acceleration and AWS Transit Gateway with multiple VPN connections for ECMP routing.

This configuration addresses the latency bottleneck for global clients and the performance constraint on the hybrid connection.

Key Concept

AWS network optimization using Global Accelerator and Transit Gateway ECMP routing to scale throughput and reduce global user latency.

Estimated Time:2m 0s

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics

More questions from this topic