AWS Certified Solutions Architect – Professional (SAP-C02) — Question 356

A company runs an intranet application on premises. The company wants to configure a cloud backup of the application. The company has selected AWS Elastic Disaster Recovery for this solution.

The company requires that replication traffic does not travel through the public internet. The application also must not be accessible from the internet. The company does not want this solution to consume all available network bandwidth because other applications require bandwidth.

Which combination of steps will meet these requirements? (Choose three.)

Answer options

• A. Create a VPC that has at least two private subnets, two NAT gateways, and a virtual private gateway.
• B. Create a VPC that has at least two public subnets, a virtual private gateway, and an internet gateway.
• C. Create an AWS Site-to-Site VPN connection between the on-premises network and the target AWS network.
• D. Create an AWS Direct Connect connection and a Direct Connect gateway between the on-premises network and the target AWS network.
• E. During configuration of the replication servers, select the option to use private IP addresses for data replication.
• F. During configuration of the launch settings for the target servers, select the option to ensure that the Recovery instance’s private IP address matches the source server's private IP address.

Correct answer: A, D, E

Explanation

AWS Direct Connect (Option D) provides a dedicated, private network connection that bypasses the public internet and allows for consistent bandwidth allocation, preventing network saturation. Configuring AWS Elastic Disaster Recovery to use private IP addresses (Option E) ensures that replication traffic is routed securely over this private connection rather than the public internet. Finally, deploying a VPC with private subnets, NAT gateways, and a virtual private gateway (Option A) keeps the recovery environment isolated from direct internet access while still allowing necessary outbound communication for updates.