CompTIA Cloud+ (CV0-004)Cloud ArchitectureMedium
A cloud engineer is setting up a new Virtual Private Cloud (VPC) for an application that needs to securely connect to an external on-premises data center. This connection requires a dedicated, private network link to ensure consistent network performance and enhanced security, bypassing the public internet. Which VPC connectivity option should be chosen?
- AVPC Peering
- BDirect Connect
- CVPN Gateway
- DInternet Gateway (IGW)
Show answer & explanationAnswer & explanation
Correct answer: B. Direct Connect
Direct Connect establishes a dedicated, private network connection between the cloud provider and an on-premises datacenter, offering consistent performance and enhanced security by avoiding the public internet.
Why the other options are wrong
- A. VPC Peering connects two VPCs privately within the same cloud provider, not a VPC to an on-premises datacenter.
- C. A VPN Gateway establishes an encrypted connection over the public internet, which doesn't guarantee consistent performance or bypass the internet entirely.
- D. An Internet Gateway allows internet connectivity for a VPC, traversing the public internet, which is not private or dedicated.
Direct Connect
Direct Connect is a cloud service solution that creates a dedicated network connection from your on-premises datacenter to a cloud provider's network. This bypasses the public internet, offering consistent network performance, reduced costs, and enhanced security.
- Dedicated, private network connection
- Bypasses the public internet
- Consistent network performance
- Enhanced security
- Typically requires physical connection to a Direct Connect location
Memory trick: Direct Connect is like laying down a private fiber cable from your office to the cloud.