CompTIA Cloud+ (CV0-004)SecurityEasy
A cloud security engineer needs to establish a secure connection from an on-premises data center to a public cloud VPC to access private resources. The connection must ensure data confidentiality and integrity during transit. Which of the following solutions is most appropriate for this requirement?
- APublic IP Gateway
- BVirtual Private Network (VPN)
- CContent Delivery Network (CDN)
- DDirect Connect
Show answer & explanationAnswer & explanation
Correct answer: B. Virtual Private Network (VPN)
A Virtual Private Network (VPN) establishes an encrypted tunnel over a public network, ensuring both confidentiality and integrity for data in transit between the on-premises data center and the cloud VPC. This directly addresses the requirement for secure communication.
Why the other options are wrong
- A. A Public IP Gateway provides internet access for cloud resources but does not inherently offer secure, encrypted connectivity for private connections.
- C. A Content Delivery Network (CDN) is used for caching and delivering content closer to users, not for establishing secure private network links between an on-premises data center and a VPC.
- D. Direct Connect provides a dedicated private connection but does not inherently encrypt data unless combined with VPN, and the question specifically asks for confidentiality and integrity during transit.
Virtual Private Network (VPN)
A VPN establishes a secure, encrypted connection over a less secure network, like the internet, to provide data confidentiality and integrity.
- Creates an encrypted tunnel
- Ensures data confidentiality and integrity
- Connects private networks over public infrastructure
Memory trick: Connect on-prem to cloud securely, like a secret tunnel.