Medium1 markMultiple Choice
Domain 1.2: Secure WorkloadsSecurityVPNNetworkingHigh Availability

AWS SAA-C03 · Question 59 · Domain 1.2: Secure Workloads

A company wants to securely connect their on-premises data center to their AWS VPC. They require an encrypted connection over the public internet. They also want to ensure high availability for this connection. <br/><br/>Which TWO actions should the solutions architect take? (Select TWO.)

Answer options:

A.

Create an AWS Direct Connect connection.

B.

Create an AWS Site-to-Site VPN connection.

C.

Configure two VPN tunnels across different Availability Zones.

D.

Use AWS PrivateLink.

E.

Set up a VPC Peering connection.

How to approach this question

Match 'encrypted over public internet' to VPN, and 'high availability' to multiple tunnels.

Full Answer

Create an AWS Site-to-Site VPN connection.<br/>Configure two VPN tunnels across different Availability Zones.
AWS Site-to-Site VPN enables you to securely connect your on-premises network to your VPC over the public internet using IPsec. By default, each AWS VPN connection provides two tunnels for high availability.

Common mistakes

Selecting Direct Connect when the requirement explicitly states 'over the public internet'.

Practice the full AWS SAA-C03 Practice Exam 4

65 questions · hints · full answers · grading

More questions from this exam