PAS-C01 Technology Practice Question
Which TWO AWS services can be used to create a private, low-latency network connection between an on-premises data center and an SAP environment on AWS? (Choose two.)
⚠ Common exam trap
Watch out — candidates often confuse AWS Transit Gateway as a direct connection service, but it is a central hub that requires an underlying connection (Direct Connect or VPN) to reach on-premises, not a standalone private connection method.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Site-to-Site VPN
AWS Direct Connect provides a dedicated, private network connection from an on-premises data center to AWS, bypassing the public internet to deliver consistent low latency and high bandwidth, which is critical for SAP workloads. AWS Site-to-Site VPN creates an encrypted tunnel over the internet, offering a private connection that can supplement Direct Connect as a backup or for lower-cost scenarios, though it introduces internet variability. Both services establish private connectivity between on-premises and AWS, meeting the requirements for low-latency SAP environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPC peering
Why it's wrong here
Connects VPCs, not on-premises.
- ✓
AWS Site-to-Site VPN
Why this is correct
Creates a secure connection over the internet between on-premises and AWS.
- ✓
AWS Direct Connect
Why this is correct
Provides a dedicated private network connection from on-premises to AWS.
- ✗
AWS Transit Gateway
Why it's wrong here
Central hub for VPCs and VPN connections, but not a direct connection type.
- ✗
AWS PrivateLink
Why it's wrong here
Used to access services privately within VPC, not for on-premises connectivity.
Go deeper
Related to this question
About these practice questions
One of 1,616 original PAS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.