SAP-C02 Practice Question: Accelerate Workload Migration and Modernization
A company is migrating a critical application from on-premises to AWS using a lift-and-shift approach. The application requires consistent low-latency access to an on-premises database. Which network solution should the company implement to meet the latency requirement during the migration?
⚠ Common exam trap
SAP-C02 often tests the difference between VPN (internet-based, variable latency) and Direct Connect (dedicated, consistent latency); candidates may choose VPN for cost savings but miss the 'consistent low-latency' requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Establish an AWS Direct Connect connection between the on-premises data center and AWS.
AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, offering consistent low latency and high bandwidth compared to internet-based connections. For a lift-and-shift application requiring consistent low-latency access to an on-premises database, Direct Connect is the appropriate solution.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set up a site-to-site VPN over the internet.
Why it's wrong here
A site-to-site VPN traverses the public internet, so latency varies with internet path conditions and cannot guarantee the consistent low-latency access the database requires. It tempts because VPNs are quick to deploy and encrypt traffic, but a dedicated connection such as AWS Direct Connect provides the deterministic latency needed here.
- ✗
Create a VPC peering connection between the on-premises network and AWS VPC.
Why it's wrong here
VPC peering connects two AWS VPCs; it cannot peer an on-premises network with a VPC, so no path to the on-premises database exists. It tempts because peering provides low-latency private connectivity between AWS networks, which is its actual purpose — but not for on-premises integration.
- ✗
Use AWS Client VPN to connect from the application servers.
Why it's wrong here
AWS Client VPN terminates individual user sessions, not server-to-server traffic from application instances to an on-premises database, and it still rides the public internet. It tempts because it is an AWS-managed VPN, but remote-user access is its purpose; a site-to-site dedicated connection is required for consistent latency.
- ✓
Establish an AWS Direct Connect connection between the on-premises data center and AWS.
Why this is correct
AWS Direct Connect provides a dedicated, private fibre connection from the data centre to AWS, giving consistent low latency and jitter rather than the variable paths of internet-based VPN. This satisfies the stem's requirement for consistent low-latency access to the on-premises database during migration.
Go deeper
Related to this question
About these practice questions
One of 984 original SAP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.