Examkin

Question

Difficulty: EasyHigh-Performing and Scalable Network Architectures

A company wants to connect its on-premises corporate data center to an AWS VPC to support a database replication workload that requires a dedicated, private network bandwidth of 10 Gbps. The connection must completely bypass the public internet. Which TWO configurations should the solutions architect implement to meet these requirements?

  1. Establish a 10 Gbps AWS Direct Connect connection to the VPC.Answer
  2. Configure an AWS Direct Connect gateway to route traffic between the on-premises network and the VPC.Answer
  3. C
    Set up a single AWS Site-to-Site VPN connection to dynamically handle the 10 Gbps replication traffic.
  4. D
    Deploy Network ACLs on the subnets to statefully track and automatically permit the return replication traffic.
  5. E
    Configure Route 53 latency-based routing to dynamically forward the replication traffic to the closest on-premises router.

Answer

Establish a 10 Gbps AWS Direct Connect connection to the VPC and configure an AWS Direct Connect gateway to route traffic between the on-premises network and the VPC.
To meet the 10 Gbps private bandwidth requirement while bypassing the public internet, AWS Direct Connect is the correct choice. Implementing a Direct Connect gateway allows routing of this connection to the target VPC.

Step-by-Step Solution

1
Analyze the requirements for network connection type and bandwidth.
The requirement specifies a dedicated, private connection bypassing the public internet with a bandwidth of 10 Gbps.
This rules out AWS Site-to-Site VPN, which operates over the public internet and is limited to 1.25 Gbps per tunnel.
2
Select the appropriate connectivity service that supports the bandwidth.
AWS Direct Connect provides dedicated physical connections that support 10 Gbps configurations.
Direct Connect meets both the private connection requirement and the high-throughput bandwidth requirement.
3
Select the gateway component to connect the Direct Connect interface to the VPC.
An AWS Direct Connect gateway connects the Direct Connect location to the VPC.
A Direct Connect gateway is the standard architecture for routing traffic between the physical Direct Connect connection and the target VPC.

Key Concept

Bypassing the public internet with high-throughput hybrid connectivity using AWS Direct Connect and Direct Connect Gateway.
Rate this question

Topics

High-Performing and Scalable Network Architectures

More questions from this topic