Hybrid Architecture for AWS Data Transfer - Exam Solution

Hybrid Architecture for AWS Data Transfer

Question

There is a requirement for a company to transfer large amounts of data between AWS and an on-premises location.

There is an additional requirement for low latency and high consistency traffic to AWS.

Given these requirements, how would you design a hybrid architecture? Choose the correct answer from the options below.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - A.

AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS.

Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.

Options B and C are incorrect because these options will not reduce network latency.

Options D is incorrect because this is only used to connect 2 VPCs.

For more information on AWS Direct Connect, just browse to the below URL:

https://aws.amazon.com/directconnect/

To design a hybrid architecture for transferring large amounts of data between AWS and an on-premises location with low latency and high consistency, the best option is to provision a Direct Connect connection to an AWS region using a Direct Connect connection. This is option A.

Direct Connect is a dedicated network connection between the on-premises location and AWS that bypasses the public internet. This provides a reliable, high-bandwidth, low-latency connection to AWS, which is especially important for large data transfers and other latency-sensitive workloads.

A Direct Connect connection is established by provisioning a dedicated connection from an on-premises location to an AWS Direct Connect location, which is a colocation facility that is directly connected to an AWS Region. From there, the traffic can be routed directly to the customer's virtual private cloud (VPC) or other AWS services, as needed.

Option B suggests creating a VPN tunnel, which can provide private connectivity but may increase latency and reduce consistency compared to a Direct Connect connection. VPN tunnels use encryption and encapsulation to secure the traffic, but this can introduce additional overhead that can slow down the connection.

Option C suggests creating an IPSec tunnel, which is similar to a VPN tunnel but uses a specific type of encryption protocol. However, as mentioned above, VPN tunnels and IPSec tunnels can introduce additional overhead that can increase latency and reduce consistency.

Option D suggests creating a VPC peering connection between AWS and the customer gateway. VPC peering allows direct communication between two VPCs, but it does not provide a direct connection between an on-premises location and AWS. Therefore, it would not be the best option for transferring large amounts of data between AWS and an on-premises location with low latency and high consistency.

In summary, the best option for designing a hybrid architecture for transferring large amounts of data between AWS and an on-premises location with low latency and high consistency is to provision a Direct Connect connection to an AWS region using a Direct Connect connection.