AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 243

Due to security requirements, all traffic must be encrypted between your VPC and your on-premises data center. You also want to maintain reliability.
What two options will allow you to achieve this? (Choose two.)

Answer options

• A. A Direct Connect connection with a Private VIF
• B. A VPN connection
• C. A Direct Connect connection with a Hosted VIF
• D. A Direct Connect connection with a Public VIF

Correct answer: B, D

Explanation

A VPN connection (Option B) provides encryption for data in transit, making it suitable for secure communication. A Direct Connect connection with a Public VIF (Option D) can also be used for encrypted traffic if it connects to a VPN, while the Private VIF (Option A) does not inherently provide encryption. The Hosted VIF (Option C) is not relevant for this requirement as it does not ensure encrypted traffic by itself.