SOA-C02 Networking and Content Delivery Practice Question
A company needs a dedicated private network connection from its on-premises data center to AWS that provides consistent network performance and high bandwidth. The connection must bypass the public internet. Which AWS service should the SysOps administrator use?
⚠ Common exam trap
Many candidates confuse AWS Site-to-Site VPN with a private connection, overlooking that it still traverses the public internet and cannot guarantee consistent performance or bypass it, whereas Direct Connect provides a dedicated physical link.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Direct Connect
AWS Direct Connect is the correct choice because it provides a dedicated, private network connection from an on-premises data center to AWS, bypassing the public internet entirely. This ensures consistent network performance, low latency, and high bandwidth, which are critical for workloads requiring predictable throughput and a private link.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Site-to-Site VPN
Why it's wrong here
AWS Site-to-Site VPN establishes IPSec tunnels over the public internet between a customer gateway and a virtual private gateway. Because traffic traverses the shared internet, it cannot guarantee consistent throughput or low latency, and it is not considered a dedicated private circuit. It also introduces encryption/decryption overhead and depends on the public route's performance, which can vary widely. This is why it is incorrect for a company that requires a dedicated private network connection.
- ✗
AWS Client VPN
Why it's wrong here
AWS Client VPN is a managed remote-access VPN service that allows individual endpoint users to securely connect to an AWS VPC or on-premises network using an OpenVPN-based client. It is purpose-built for user-to-network access, not for site-to-site connectivity between a data center and AWS. Client VPN does not provide a dedicated physical or logical private circuit between two fixed sites, and its performance still relies on the public internet. Therefore, it does not meet the requirement for a dedicated private network connection.
- ✓
AWS Direct Connect
Why this is correct
AWS Direct Connect is the correct answer because it provides a dedicated private network connection from an on-premises data center to AWS using a physical cross-connect at a Direct Connect location. This connection bypasses the public internet, delivering consistent network performance, lower latency, and higher bandwidth options (e.g., 1 Gbps or 10 Gbps, and up to 100 Gbps with aggregated links). It also reduces bandwidth costs and provides a more predictable networking experience for hybrid architectures. Direct Connect is the dedicated private circuit required by the company.
- ✗
AWS Transit Gateway
Why it's wrong here
AWS Transit Gateway is a network transit hub that interconnects VPCs and on-premises networks through attachments, such as VPC attachments, VPN attachments, or Direct Connect attachments. It does not provide a physical or dedicated connection by itself; it only routes traffic between supported attachments. To use a dedicated private connection with Transit Gateway, you must still provision AWS Direct Connect and attach the associated virtual interface to the Transit Gateway. Thus, Transit Gateway is not a connectivity service in this context but rather an aggregation and routing layer.
Go deeper
Related to this question
About these practice questions
This SOA-C02 question is part of Courseiva's 1,169-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.