VPC Peering and Fault Tolerance Question

[SeanB]

Regarding the question and answer below, i want to make sure i am understanding this correctly.

Test Question:

A media company has two VPCs: VPC-1 and VPC-2 with peering connection between each other. VPC-1 only contains private subnets while VPC-2 only contains public subnets. The company uses a single AWS Direct Connect connection and a virtual interface to connect their on-premises network with VPC-1.

Which of the following options increase the fault tolerance of the connection to VPC-1? (Select TWO.)

Test Answer:

– Establish a hardware VPN over the Internet between the VPC and the on-premises network.

– Establish another AWS Direct Connect connection and private virtual interface in the same AWS region.

My Question 1: To increase fault tolerance to on premise we are creating a second connection from VPC 1 to on premise and that is done with a hardware VPN, is that correct?

My Question 2: Then a second connection from VPC 1 to VPC 2 is used to provide fault tolerance and that is done using direct connect? Why did the correct answer not say “Establish another AWS Direct Connect connection and private virtual interface between VPC1 and <b style=”font-style: italic;”>VPC 2.” instead of “Establish another AWS Direct Connect connection and private virtual interface in the same AWS region.” Assuming that since the direct connect can only be established between two VPCs that it is assumed it is between VPC1 and VPC2?

[Carlo-TutorialsDojo]

Hello SeanB,

Thanks for your feedback.

Please find the answers to your queries below:

My Question 1: To increase fault tolerance to on premise we are creating a second connection from VPC 1 to on premise and that is done with a hardware VPN, is that correct?

>> Yes, that is correct. So if ever the existing DC connection fails, the VPN connection will serve as a backup.

My Question 2: Then a second connection from VPC 1 to VPC 2 is used to provide fault tolerance and that is done using direct connect? Why did the correct answer not say “Establish another AWS Direct Connect connection and private virtual interface between VPC1 and <b style=”font-style: italic;”>VPC 2.”

>> Direct Connect is primarily used for linking an on-premises network and a VPC privately. You don’t use it to connect two VPCs.

Let me know if this helps.

Regards,

Carlo @ Tutorials Dojo

[SeanB]

I see thankyou Carlo. So this just provides HA between VPC1 and on premise and doesn’t provide any fault tolerance/HA from VPC1 to VPC2?

And for direct connect to work a hardware VPN and private virtual interface is needed?