AWS Certified Solutions Architect – Professional — Question 632

A company with global offices has a single 1 Gbps AWS Direct Connect connection to a single AWS Region. The company's on-premises network uses the connection to communicate with the company's resources in the AWS Cloud. The connection has a single private virtual interface that connects to a single VPC.
A solutions architect must implement a solution that adds a redundant Direct Connect connection in the same Region. The solution also must provide connectivity to other Regions through the same pair of Direct Connect connections as the company expands into other Regions.
Which solution meets these requirements?

Answer options

• A. Provision a Direct Connect gateway. Delete the existing private virtual interface from the existing connection. Create the second Direct Connect connection. Create a new private virtual interface on each connection, and connect both private virtual interfaces to the Direct Connect gateway. Connect the Direct Connect gateway to the single VPC.
• B. Keep the existing private virtual interface. Create the second Direct Connect connection. Create a new private virtual interface on the new connection, and connect the new private virtual interface to the single VPC.
• C. Keep the existing private virtual interface. Create the second Direct Connect connection. Create a new public virtual interface on the new connection and connect the new public virtual interface to the single VPC.
• D. Provision a transit gateway. Delete the existing private virtual interface from the existing connection. Create the second Direct Connect connection. Create a new private virtual interface on each connection, and connect both private virtual interfaces to the transit gateway. Associate the transit gateway with the single VPC.

Correct answer: A

Explanation

To support multi-region connectivity over AWS Direct Connect, a Direct Connect gateway (DXGW) is required, which allows private virtual interfaces (VIFs) to connect to VPCs in any AWS Region. Option A correctly implements this by migrating the existing private VIF to a DXGW and adding a redundant DX connection with its own private VIF connected to the same DXGW. Options B and C fail to support multi-region routing efficiently, and Option D is incorrect because private VIFs cannot be attached directly to an AWS Transit Gateway without a Transit VIF and DXGW.