Courseiva
Security ArchitecturehardMultiple ChoiceObjective-mapped

CAS-004 Security Architecture Practice Question

An enterprise is securing a hybrid cloud environment with on-premises and AWS workloads. They need to ensure that on-premises systems can privately access VPC resources without traversing the public internet. Which AWS service should they use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

AWS Direct Connect

AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, bypassing the internet for lower latency and increased security.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • AWS VPN (site-to-site)

    Why it's wrong here

    VPN uses the public internet; Direct Connect is private.

  • AWS Transit Gateway

    Why it's wrong here

    Transit Gateway is a network transit hub to connect VPCs and on-premises networks, but it requires a connection method like VPN or Direct Connect.

  • AWS PrivateLink

    Why it's wrong here

    PrivateLink enables private connectivity between VPCs and services, but not from on-premises directly to a VPC without additional setup.

  • AWS Direct Connect

    Why this is correct

    Direct Connect provides a dedicated private connection from on-premises to AWS.

About these practice questions

Courseiva writes every CAS-005 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.