Home › Forums › AWS › AWS Certified Solutions Architect Professional › Cost Control DX Question
Tagged: ipsec
-
Cost Control DX Question
TutorialsDojo-Support updated 4 years ago 3 Members · 3 Posts -
Hello, I had a question on bank 4 that isn’t very clear for the correct answer that goes with it.
A call center company has recently adopted a hybrid architecture in which they needed a more predictable network performance and reduced bandwidth costs to connect their data center and their AWS Cloud. They decided to have two AWS Direct Connect connections to have a highly available and much more stable network performance. After a recent IT financial audit, it was decided to review the current implementation and replace it with a more cost-effective option.
Which of the following connectivity setup is the most suitable solution for this scenario?
The correct answer is “A combination of AWS Direct Connect and an AWS managed VPN connection”
In the explanation it mentions the value of DX in this scenario, then says “You can combine this connection with an AWS managed VPN connection to create an IPsec-encrypted connection.”
There was no requirement for better security or encryption in the question. I don’t know why we would assume that having a private DX connection isn’t enough security for us when there is no mention of security or encryption in the question. If we are terminating one of the DX connections to save cost, it seems safe to assume that adding the cost of a VPN when there was no mention of IPsec, encryption, or security isn’t something we should just assume is necessary.
Thanks. If I am missing something I hope you can explain it to me.
-
Hi Benjamin,
good morning
The use of direct connect or VPN is for a direct connection from the on premise to the AWS resources.
The question says that earlier you had 2 direct connect and to decrease the cost, what options you can do ??
So when you think, if you go with one direct connect, you can bring the cost down, plus for reliability (in case direct connect fail) you are keeping ipsec
the cost of Ipsec is very much less compared to the cancelled AWS direct connect
Hope I was able to explain
Thanks
Joseph John
-
Hello benjamin,
Thank you for sharing your thoughts on this item.
As an addition to what joseph has said.
Take note that there are questions in the actual AWS exam that are difficult, tricky, and ambiguous. You have to be prepared to look for specific keywords or key phrases in order to find the most suitable answer. This is the style that we are trying to mimic in our practice tests. Some of the questions do not explicitly show the obvious keywords or phrases that will easily point to the answer.
The question mentioned the word “replace it with a more cost-effective option.” I think that is sufficient to answer the question given the options provided.
Let us know if you need further assistance. The Tutorials Dojo team is dedicated in helping you pass your AWS exam on your first try!
Regards,
Gerome @ TutorialsDojo
Log in to reply.