AWS Certified SysOps Administrator – AssociateNetworking and Content DeliveryEasy
A SysOps administrator needs to establish a secure and dedicated network connection between an on-premises data center and an AWS VPC. The connection must offer consistent network performance and lower network costs compared to IPsec VPN over the public internet. Which AWS service should be used?
- AVPC Peering
- BAWS Transit Gateway
- CAWS Direct Connect
- DAWS Site-to-Site VPN
Show answer & explanationAnswer & explanation
Correct answer: C. AWS Direct Connect
AWS Direct Connect provides a dedicated, private network connection from your on-premises data center to AWS, offering consistent network performance and typically lower costs for high bandwidth usage compared to VPN over the public internet.
Why the other options are wrong
- A. VPC Peering connects two AWS VPCs directly, not an on-premises data center to a VPC.
- B. Transit Gateway connects multiple VPCs and on-premises networks but relies on other services like VPN or Direct Connect for the actual on-premises connection.
- D. Site-to-Site VPN uses the public internet and does not guarantee consistent performance or lower costs for high bandwidth.
AWS Direct Connect
A cloud service solution that links your internal network to an AWS Direct Connect location over a standard Ethernet fiber-optic cable.
- Dedicated network connection
- Reduced network costs (for high data transfer)
- Increased bandwidth throughput
- More consistent network experience than internet-based connections
Memory trick: Direct Connect is Dedicated, VPN is Virtual Private Network.