SAP-C02 Practice Question: Accelerate Workload Migration and Modernization
A company is planning a hybrid cloud migration and needs to establish a dedicated network connection between its on-premises data center and AWS with consistent low latency. Which AWS service should be used?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Direct Connect
AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, offering consistent low latency. Option A is correct for this reason. Option B (AWS Client VPN) is incorrect because it is designed for individual remote clients, not a dedicated connection. Option C (AWS Transit Gateway) is incorrect as it is a hub for connecting networks, not a direct connection method. Option D (AWS Site-to-Site VPN) is incorrect because it uses the public internet and does not provide dedicated bandwidth or consistent low latency.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS Direct Connect
Why this is correct
AWS Direct Connect provisions a dedicated private network link from on-premises equipment to an AWS location, bypassing the public internet. This delivers consistent low latency and predictable bandwidth, satisfying the hybrid migration requirement for a dedicated connection, unlike VPN tunnels that traverse shared internet paths.
- ✗
AWS Client VPN
Why it's wrong here
Client VPN provides remote users with software-based access to AWS resources; it does not deliver a dedicated, consistent-latency link between a data centre and AWS. It is tempting because it also uses IPsec over the internet, and would be correct for individual remote workers needing access, not site-to-site hybrid connectivity.
- ✗
AWS Transit Gateway
Why it's wrong here
Transit Gateway is a regional hub connecting VPCs, VPNs and Direct Connect gateways; it does not itself provision a dedicated private circuit to on-premises. It is tempting because it aggregates existing hybrid links, and would be correct for centralising routing between many VPCs and attachments once connectivity exists.
- ✗
AWS Site-to-Site VPN
Why it's wrong here
Site-to-Site VPN tunnels over the public internet, so latency and throughput vary rather than remaining consistent; it lacks the dedicated private circuit the scenario requires. It is tempting as a quick hybrid link, and would be correct for encrypted connectivity where dedicated bandwidth and predictable latency are not mandated.
Go deeper
Related to this question
About these practice questions
This SAP-C02 question is part of Courseiva's 984-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.