Examkin

Soru

Zorluk: KolayHigh-Performing and Scalable Network Architectures

A media production agency needs to transfer large, uncompressed video files daily from their on-premises editing studio to Amazon S3 buckets inside their AWS VPC. The agency requires a network connection that guarantees a throughput of at least 5 Gbps5\text{ Gbps} and ensures that the traffic does not traverse the public internet.

Which steps should a solutions architect take to configure this network connection? (Select TWO.)

  1. Provision a 10 Gbps10\text{ Gbps} AWS Direct Connect connection.Cevap
  2. Create a private virtual interface (VIF) to connect to the VPC.Cevap
  3. C
    Set up a single AWS Site-to-Site VPN connection to a virtual private gateway.
  4. D
    Configure stateful security groups to filter traffic at the subnet boundary.
  5. E
    Use Amazon Route 53 with latency-based routing to balance the file transfer payload across multiple public internet gateways.

Cevap

To meet the requirements, the solutions architect must provision a 10 Gbps10\text{ Gbps} AWS Direct Connect connection and create a private virtual interface (VIF) to connect to the VPC.
To achieve a dedicated, private connection that does not traverse the public internet and meets the throughput requirement of at least 5 Gbps5\text{ Gbps}, the company must use AWS Direct Connect. A 10 Gbps10\text{ Gbps} connection satisfies the performance demand, while a private virtual interface (VIF) is required to establish private network connectivity directly to resources inside a VPC.

Adım Adım Çözüm

1
Evaluate the network throughput and public internet constraints.
The requirement demands a minimum of 5 Gbps5\text{ Gbps} throughput and specifies that the traffic must not traverse the public internet.
This rules out a standard AWS Site-to-Site VPN connection, which runs over the public internet and is limited to 1.25 Gbps1.25\text{ Gbps} per tunnel.
2
Select the appropriate hybrid connectivity service.
AWS Direct Connect provides dedicated, private physical network connections to AWS that bypass the public internet. A 10 Gbps10\text{ Gbps} connection is selected to support the 5 Gbps5\text{ Gbps} requirement.
Direct Connect supports standard port speeds of 1 Gbps1\text{ Gbps}, 10 Gbps10\text{ Gbps}, or 100 Gbps100\text{ Gbps}.
3
Determine the required virtual interface type for VPC resource access.
A private virtual interface (VIF) is created to connect the Direct Connect connection to the VPC.
A private VIF is required to access private resources within a VPC, such as EC2 instances or S3 VPC endpoints, via Direct Connect.

Anahtar Kavram

High-Performing and Scalable Network Architectures
Bu soruyu puanla

Konular

High-Performing and Scalable Network Architectures

Bu konudan daha fazla soru