Cisco CCNP Security Core (SCOR) 350-701Cloud SecurityMedium
A company is migrating its on-premises applications to a public cloud provider. They need to ensure that all data in transit between their on-premises data center and the cloud environment is encrypted and protected from eavesdropping. The solution must also provide a secure, private connection that bypasses the public internet for sensitive workloads. Which cloud connectivity option would best fulfill these requirements?
- ACloud Direct Connect / ExpressRoute / Interconnect
- BPublic IP addresses for all cloud resources
- CSite-to-Site VPN over the public internet
- DInternet Gateway
Show answer & explanationAnswer & explanation
Correct answer: A. Cloud Direct Connect / ExpressRoute / Interconnect
Cloud Direct Connect (AWS), ExpressRoute (Azure), or Interconnect (GCP) provide dedicated, private network connections between an on-premises data center and the cloud, bypassing the public internet and offering enhanced security and predictable performance, often with encryption in transit.
Why the other options are wrong
- B. Public IP addresses expose resources to the public internet without inherent private connectivity or encryption for the entire connection.
- C. Site-to-Site VPN uses the public internet, which does not 'bypass the public internet' as required, although it provides encryption.
- D. An Internet Gateway allows cloud resources to access the public internet, not a private connection for on-premises integration.
Cloud Direct Connect / ExpressRoute / Interconnect
Dedicated, private network connections that establish a direct link between an on-premises data center and a cloud provider's network, bypassing the public internet.
- Provides increased bandwidth and more consistent network experience.
- Offers enhanced security by bypassing the public internet.
- Typically used for hybrid cloud architectures and large data transfers.
Memory trick: Direct Connect is like building your own private highway to the cloud.