Secure On-Premises to AWS Connection Within One Week?
A company wants to set up a secure network connection from on premises to the AWS Cloud within 1 week. Which solution will meet these requirements?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests selecting an AWS hybrid connectivity option that balances security with rapid deployment; the trap is choosing Direct Connect for its dedicated bandwidth even though its provisioning lead time fails the one-week requirement.
A secure on-premises-to-AWS connection that must be ready within one week is best met by AWS Site-to-Site VPN, which uses IPsec tunnels over the public internet and can be configured quickly. Direct Connect requires physical or hosted cross-connects plus carrier coordination, so it cannot reliably meet a seven-day deadline.
Test takers often choose AWS Direct Connect because it is a dedicated private connection, but it typically takes weeks or months to provision and therefore misses the seven-day requirement.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
AWS Site-to-Site VPN is correct because it creates an encrypted IPsec tunnel between an on-premises customer gateway and an AWS virtual private gateway or transit gateway over the public internet. It is a fully managed AWS service, so there is no physical circuit to order, no cross-connect to schedule, and no carrier coordination that would consume the one-week window. As alokdixit2006 noted, it uses "IPSec tunnels" to provide a secure path between the data center or branch office and AWS resources. This makes it the only listed option that delivers the required security and can realistically be operational within days.Why the Other Options Are Wrong
AWS Direct Connect offers a dedicated private connection, but provisioning involves AWS Direct Connect locations, cross-connects or hosted connections, and often third-party carriers, so it routinely takes weeks or months rather than one week. Amazon VPC is a virtual network that hosts AWS resources; it is not itself a hybrid connectivity service and would still need a VPN or Direct Connect to reach on-premises. An edge location is part of CloudFront's content delivery network, not a secure tunnel for extending an on-premises network into AWS. None of these alternatives solves both the security and the one-week timeline.Community Comment Notes
The community consensus is strongly behind Site-to-Site VPN. As lunatik observed, the key phrase is "1 week" and Direct Connect needs more time because it involves multiple parties and configurations. ShaiTay likewise selected it as "best for the short set up time," while komorebi simply confirmed the answer. Alokdixit2006 added the useful technical detail that the service uses IPsec tunnels, reinforcing why it satisfies the secure-connection requirement without a long procurement cycle.Official Reference
Exam Strategy
Scan for time constraints before comparing bandwidth or dedication, because a phrase such as 'within 1 week' immediately eliminates Direct Connect. Then confirm that the remaining option provides encryption in transit, not just isolated VPC networking.
Frequently Asked Questions
Why is AWS Direct Connect wrong for a one-week deadline?
Direct Connect requires physical cross-connects or hosted connections at an AWS Direct Connect location, plus carrier coordination, so provisioning often takes weeks or months rather than one week.
Does AWS Site-to-Site VPN encrypt on-premises traffic?
Yes, it uses IPsec tunnels over the public internet to encrypt traffic between the customer gateway and the AWS virtual private gateway or transit gateway.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →