A company wants to securely connect its on-premises data center to an Amazon VPC. They require an encrypted connection over the internet. The connection must support dynamic routing using BGP. Which AWS service should they use?

Answer options:

AWS Direct Connect

AWS Site-to-Site VPN

AWS Client VPN

AWS PrivateLink

How to approach this question

Identify the service for encrypted internet-based site connectivity.

Full Answer

B.AWS Site-to-Site VPN✓ Correct

AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon VPC. It uses IPsec for encryption over the internet and supports BGP for dynamic routing.

Common mistakes

Choosing Direct Connect, which does not go over the internet.

Question 66 All questions Question 68

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7

75 questions · hints · full answers · grading

More questions from this exam

Q01A global enterprise is designing a multi-region network architecture connecting 50 AWS accounts a...Hard Q02A company is migrating its hybrid network to AWS. They have two 10 Gbps AWS Direct Connect connec...Hard Q03An enterprise has 100 AWS accounts in AWS Organizations. The security team mandates that all Amaz...Medium Q04A financial company requires that all EBS volumes, S3 buckets, and RDS databases be encrypted usi...Easy Q05An enterprise is designing a disaster recovery strategy for a critical application running on Ama...Hard

View all 75 questions →