CLF-C02 practice question: Networking (2 of 3)

Cloud Technology and Services A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

A retailer needs a private, encrypted connection from its branch office network to a VPC.

It wants to use its existing internet connection, and it does not want to order a dedicated private line.

Which service should it use?

Choose one answer.

A. AWS Site-to-Site VPN, which creates encrypted tunnels over the internet
B. AWS Direct Connect, a dedicated private network connection into AWS
C. An internet gateway, which lets the VPC send traffic to the internet
D. VPC peering, which connects two VPCs privately

Show the answer and explanation

Answer: A

A. Right: Site-to-Site VPN creates encrypted tunnels between the branch network and the VPC over the existing internet connection. It needs no dedicated line. Learn more: AWS Direct Connect and Site-to-Site VPN (opens in a new tab)
B. Wrong: Direct Connect is a dedicated network connection that is ordered and set up through a provider. The retailer has ruled out a dedicated line. Learn more: Create a dedicated network connection to AWS (opens in a new tab)
C. Wrong: An internet gateway lets resources in a VPC reach the internet. It does not create an encrypted link between the branch network and the VPC.
D. Wrong: VPC peering joins two VPCs to each other. It does not connect an on-premises branch network to a VPC.

Explanation

Site-to-Site VPN connects an on-premises network to a VPC through encrypted tunnels over the internet, which meets the requirements. Direct Connect needs a dedicated line the retailer does not want, and an internet gateway or VPC peering does not connect a branch network securely.

Study

AWS Direct Connect and Site-to-Site VPN

CLF-C02 practice question: Networking (2 of 3)

Explanation

Study

Keep practicing