AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 20

You run a well-architected, multi-AZ application in the eu-central-1 (Frankfurt) AWS region. The application is hosted in a VPC and is only accessed from the corporate network. To support large volumes of data transfer and administration of the application, you use a single 10-Gbps AWS Direct Connect connection with multiple private virtual interfaces. As part of a review, you decide to improve the resilience of your connection to AWS and make sure that any additional connectivity does not share the same Direct Connect routers at AWS. You need to provide the best levels of resilience to meet the application's needs.
Which two options should you consider? (Choose two.)

Answer options

• A. Install a second 10-Gbps Direct Connect connection to the same Direct Connection location.
• B. Deploy an IPsec VPN over a public virtual interface on a new 10-Gbps Direct Connect connection.
• C. Install a second 10-Gbps Direct Connect connection to a Direct Connect location in eu-west-1.
• D. Deploy an IPsec VPN over the Internet to the eu-west-1 region for diversity.
• E. Install a second 10-Gbps Direct Connect connection to a second Direct Connect location for eu-central-1.

Correct answer: C, E

Explanation

The correct answers are C and E because both options provide redundancy by utilizing multiple Direct Connect locations, which enhances resilience. Option A does not improve resilience since it relies on the same location, while option B introduces a VPN that may not provide the same level of performance as Direct Connect. Option D relies on Internet connectivity, which is less reliable than Direct Connect solutions.