AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 183

You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24 ֳ— 7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud.
Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets.
Select the correct network configuration that best facilitates your company's continued growth plans.

Answer options

• A. Provision a Direct Connect connection - between your service provider's data center and the AWS region that your cloud compute resources exist in. Configure just a Private Virtual Interface. As this is a Direct Connection, a Virtual Private Gateway is not required
• B. Configure a site-to-site layer 2 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• C. Configure a site-to-site layer 3 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• D. Provision a Direct Connect connection ג€" between your existing service provider's data center and the AWS region that your cloud compute resources exist in. Configure a Virtual Private Gateway and Private Virtual Interface

Correct answer: D

Explanation

The correct answer is D because provisioning a Direct Connect connection with a Virtual Private Gateway and a Private Virtual Interface ensures a secure and high-performance connection suitable for the required QoS. Option A fails to include the necessary Virtual Private Gateway, while options B and C, which use OpenVPN, may not provide the same level of reliability and performance needed for real-time data transfer.