Q57 — AWS SAA-C03 Ch.12

Question 57 of 100 | ← Chapter 12

Q857. A company needs a secure connection between its on-premises environment and AWS. This connection does not need high bandwidth and will handle a small amount of traffic. The connection should be set up quickly.What is the MOST cost-effective method to establish this type of connection?

Correct Answer: D. Implement an AWS Site-to-Site VPN connection.

Explanation

To establish a secure connection between an on-premises environment and AWS that does not require high bandwidth and will handle a small amount of traffic, the MOST cost-effective method is:D. Implement an AWS Site-to-Site VPN connection.Here's why:Option D suggests implementing an AWS Site-to-Site VPN connection. This method allows you to establish a secure and encrypted connection between your on-premises environment and AWS over the internet. It is a cost-effective solution as it does not require additional physical infrastructure or specialized hardware.With an AWS Site-to-Site VPN connection, you can leverage your existing internet connectivity to establish the connection. It provides secure access to AWS resources using industry-standard IPsec VPN protocols. This option is suitable for low to moderate bandwidth requirements and can handle small amounts of traffic efficiently.Option A suggests implementing a client VPN. While a client VPN can provide secure remote access for individual users, it may not be the most cost-effective solution for connecting the entire on-premises environment to AWS. Client VPNs are designed for user-level access rather than site-level connectivity.Option B suggests implementing AWS Direct Connect. However, Direct Connect is typically used for high-bandwidth, dedicated, and consistent connectivity between on-premises environments and AWS. It requires additional physical network infrastructure and may not be cost-effective for low bandwidth and small traffic scenarios.Option C suggests implementing a bastion host on Amazon EC2. While a bastion host can provide secure remote access to resources in your AWS environment, it does not directly address the requirement of establishing a secure connection between the on-premises environment and AWS. It focuses on access to individual instances rather than site-level connectivity.In summary, the MOST cost-effective method to establish a secure connection between an on-premises environment and AWS for low bandwidth and small traffic is to implement an AWS Site-to-Site VPN connection. This solution utilizes existing internet connectivity, is cost-effective, and provides secure access to AWS resources over the internet.