Security Architecture →hardMultiple ChoiceObjective-mapped

CAS-004 Security Architecture Practice Question

A security architect is designing a hybrid cloud environment with workloads in AWS and on-premises. The architect needs to ensure secure, low-latency connectivity between the two environments without traversing the internet. Which solution should be used?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

AWS Direct Connect

AWS Direct Connect provides dedicated private network connectivity from on-premises to AWS, offering low latency and security without internet exposure.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
AWS Direct Connect
Why this is correct
Direct Connect provides a dedicated private connection meeting the requirements.
✗
Site-to-site VPN over the internet
Why it's wrong here
VPN over the internet uses encryption but still traverses the public internet, potentially adding latency.
✗
AWS Client VPN
Why it's wrong here
Client VPN is for individual remote users, not site-to-site hybrid connectivity.
✗
AWS Transit Gateway with internet gateway
Why it's wrong here
Transit Gateway connects VPCs but still uses internet for on-premises connectivity unless combined with Direct Connect.

Go deeper

CAS-004 Security Architecture Practice Question

Why each option matters

Option-by-option breakdown

Related to this question