QuestionQ111

Network Design

A company is at an early stage of adopting the AWS Cloud. It has an application running in an on-premises data center in Asia and must deploy new applications in the us-east-1 Region. The cloud applications require connectivity to the on-premises data center.

The company must establish a communication channel between AWS and the data center. The solution must improve latency, reduce the risk of performance effects from transcontinental routing across the public internet, and encrypt data in transit.

Which solution will satisfy these requirements in the LEAST amount of time?

  • A Create an AWS Site-to-Site VPN connection with acceleration turned on. Create a virtual private gateway. Attach the Site-to-Site VPN connection to the virtual private gateway. Attach the virtual private gateway to the VPC where the applications will be deployed.
  • B Create an AWS Site-to-Site VPN connection with acceleration turned on. Create a transit gateway. Attach the Site-to-Site VPN connection to the transit gateway. Create a transit gateway attachment to the VPC where the applications will be deployed.
  • C Create an AWS Direct Connect connection. Create a virtual private gateway. Create a public VIF and a private VIF that use the virtual private gateway. Create an AWS Site-to-Site VPN connection over the public VIF.
  • D Create an AWS Site-to-Site VPN connection with acceleration turned off. Create a transit gateway. Attach the Site-to-Site VPN connection to the transit gateway. Create a transit gateway attachment to the VPC where the applications will be deployed.
Explanation

An accelerated AWS Site-to-Site VPN uses AWS Global Accelerator to bring traffic onto the congestion-free AWS global network close to the customer gateway, optimizing the path and helping avoid public-internet disruptions. Site-to-Site VPN provides IPsec encryption in transit and can be deployed faster than a Direct Connect connection. VPN acceleration is supported only for Site-to-Site VPN connections attached to a transit gateway; virtual private gateways do not support it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!