CLF-C02 Practice Question 17: Hybrid Connectivity
AWS Certified Cloud Practitioner (CLF-C02) · Test 2 · question 7 of 10
A company transfers several terabytes a day between its on-premises data center and its Amazon VPC. Traffic currently crosses the public internet and throughput varies widely. The company wants a dedicated, private network connection to AWS that bypasses the public internet and offers more consistent network performance. What should it use?
Show answer and explanation
Answer:
AWS Direct Connect links your internal network to a Direct Connect location over a standard Ethernet fiber-optic cable, and from there to your VPC or to public AWS services, bypassing the public internet in the network path. Because the traffic stays off the public internet, it provides more predictable throughput and latency than an internet-based connection.
Option A, Site-to-Site VPN, is the classic distractor: it creates encrypted IPsec tunnels between your network and your VPC and is quick and inexpensive to set up, but those tunnels still run over the internet, so performance remains subject to internet conditions. Option B, CloudFront, is a content delivery network that caches content at edge locations for end users; it does not connect a data center to a VPC. Option C, VPC peering, routes traffic privately between two VPCs, not between a VPC and an on-premises network.
References: What is Direct Connect?; What is AWS Site-to-Site VPN?