Question
A company is migrating one of its legacy systems from an on-premises data center to AWS. The application server will run on AWS, but the database must remain in the on-premises data center for compliance reasons. The database is sensitive to network latency. Additionally, the data that travels between the on-premises data center and AWS must have IPsec encryption.
Which combination of AWS solutions will meet these requirements? (Choose two.)
- A. AWS Site-to-Site VPN Correct
- B. AWS Direct Connect Correct
- C. AWS VPN CloudHub
- D. VPC peering
- E. NAT gateway
Explanation
AWS Site-to-Site VPN (Option A) provides an encrypted connection over the internet between the on-premises data center and AWS, fulfilling the requirement for IPsec encryption. AWS Direct Connect (Option B) offers a dedicated network connection from the company's premises to AWS, reducing network latency and providing a more consistent network experience compared to internet-based connections.
