Exams / CLF-C02 / Networking / Question 2
CLF-C02 practice question: Networking (2 of 3)
Cloud Technology and Services A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
A company needs to connect its branch office network to a VPC this week. Traffic must be encrypted, and the company wants to use its existing internet connection instead of ordering a dedicated line. Which service should it use?
Choose one answer.
- AA. AWS Direct Connect
- BB. AWS Site-to-Site VPN
- CC. An internet gateway
- DD. VPC peering
Show the answer and explanation
Answer: B
- A. Wrong: Direct Connect uses a dedicated or hosted connection through a Direct Connect location, which takes time to arrange and bypasses the internet.
- B. Right: Correct. Site-to-Site VPN creates encrypted IPsec tunnels over the internet between the on-premises network and the VPC.
- C. Wrong: An internet gateway connects a VPC to the internet. It does not create a private, encrypted link to the office network.
- D. Wrong: VPC peering connects two VPCs. It does not connect an on-premises network.
Explanation
AWS Site-to-Site VPN connects an on-premises network to a VPC through encrypted IPsec tunnels across the internet, so it can be set up quickly using an existing connection. AWS Direct Connect instead provides a private connection that bypasses internet service providers, which suits steady, high-volume traffic but takes longer to put in place.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.