AWS Certified Cloud Practitioner (CLF-C02) — Question 613

A company needs to set up dedicated network connectivity between its on-premises data center and the AWS Cloud. The network cannot use the public internet.

Which AWS service or feature will meet these requirements?

Answer options

• A. AWS Transit Gateway
• B. AWS VPN
• C. Amazon CloudFront
• D. AWS Direct Connect

Correct answer: D

Explanation

AWS Direct Connect establishes a dedicated, physical network connection from an on-premises facility to AWS that bypasses the public internet entirely. In contrast, AWS VPN connections traverse the public internet, and Amazon CloudFront is a content delivery network rather than a dedicated connectivity service. AWS Transit Gateway acts as a network transit hub to connect VPCs and on-premises networks but relies on other services like AWS Direct Connect or AWS VPN for the underlying physical connectivity.