ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 406 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional
Question #: 406
Topic #: 1
[All AWS Certified Solutions Architect - Professional Questions]

A company's data center is connected to the AWS Cloud over a minimally used 10 Gbps AWS Direct Connect connection with a private virtual interface to its virtual private cloud (VPC). The company internet connection is 200 Mbps, and the company has a 150 TB dataset that is created each Friday. The data must be transferred and available in Amazon S3 on Monday morning.
Which is the LEAST expensive way to meet the requirements while allowing for data transfer growth?

  • A. Order two 80 TB AWS Snowball appliances. Offload the data to the appliances and ship them to AWS. AWS will copy the data from the Snowball appliances to Amazon S3.
  • B. Create a VPC endpoint for Amazon S3. Copy the data to Amazon S3 by using the VPC endpoint, forcing the transfer to use the Direct Connect connection.
  • C. Create a VPC endpoint for Amazon S3. Set up a reverse proxy farm behind a Classic Load Balancer in the VPC. Copy the data to Amazon S3 using the proxy.
  • D. Create a public virtual interface on a Direct Connect connection, and copy the data to Amazon S3 over the connection.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Huy at Aug. 26, 2019, 4:23 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
donathon
Highly Voted 3 years, 9 months ago
D A: Too long. B\C: VPC endpoints are for communications between VPC and S3. You will need a public virtual interface on DC to connect to S3 when the data is on premise. To connect to AWS public endpoints, such as an Amazon Elastic Compute Cloud (Amazon EC2) or Amazon Simple Storage Service (Amazon S3), with dedicated network performance, use a public virtual interface.A public virtual interface allows you to connect to all AWS public IP spaces globally. Direct Connect customers in any Direct Connect location can create public virtual interfaces to receive Amazon’s global IP routes, and they can access publicly routable Amazon services in any AWS Regions (except the AWS China Region).
upvoted 48 times
wahlbergusa
3 years, 4 months ago
The explanation of B in this comment (and all the comments below) is wrong. S3 Interface Endpoints supports communication from on-prem to S3. See : https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-access-direct-connect/ However, VPC Endpoints are charged per GB (whichever the data transfer occurs) hence D is still the correct answer.
upvoted 4 times
Mehdi221
1 year, 4 months ago
Agree. B is totally possible but costs ~ 1,500 bucks. Since we are looking for the *LEAST expensive way*, D is the solution. B would have been the solution had the question been about security. Tricky question.
upvoted 1 times
...
feizz
3 years, 1 month ago
yes, aws now support on prem to s3 by private link which is using the interface endpoints
upvoted 1 times
...
...
...
Huy
Highly Voted 3 years, 9 months ago
A is not practical as Snow Ball takes more than 1 week. B is not valid because Direct Connect can't access VPC Endpoint. C and D are Ok but C is not cost effective because you have to setup a proxy farm. D should be correct
upvoted 20 times
dpvnme
3 years, 9 months ago
Yeah, D is the correct answer
upvoted 5 times
...
kirrim
3 years, 8 months ago
B used to be invalid, but AWS published a solution to access an S3 VPC Endpoint via private DX (the second part of this document): https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-access-direct-connect/ So based on that, AWS will support B now. I'm not saying I still wouldn't just do the public VIF (D) to keep things easy, just saying that B is possible now.
upvoted 3 times
...
...
foureye2004
Most Recent 2 years, 10 months ago
B,C,D is a valid method: B: https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-access-direct-connect/ if you create VPC Endpoint for S3 with Interface type C: https://d0.awsstatic.com/aws-answers/Accessing_VPC_Endpoints_from_Remote_Networks.pdf work on 2 type of VPC endpoint. D: it a function of DX. Must be work. Now, point to LEAST EXPENSIVE B: Fee of proxy farm. C: Fee of S3 interface endpoint ($/hour) and data processed D: Free (with S3 ingress) So, D is the best choice!
upvoted 3 times
...
jyrajan69
3 years, 2 months ago
The question states, a minimally used 10 Gbps AWS Direct Connect connection with a private virtual interface to its virtual private cloud (VPC). Therefore there is an existing virtual interface, so why are we creating another one as stated in answer D. For me the simpler option is B, unless someone can give a valid reason
upvoted 1 times
Network_1
2 years, 10 months ago
Private VIF is connected to VPC. You need Public VIF to connect to S3.
upvoted 2 times
...
...
sophiaabigail
3 years, 2 months ago
There are few exams as grinding for the candidates as the AWS Solutions Architect Professional exam. The failure rate of the exam is well above 72%. This means that less than 28% of the candidates who take the AWS Solutions Architect Professional exam manage to clear it. Now, this is a daunting number. https://192168l254.com.mx/ES
upvoted 1 times
...
SaiKrish123
3 years, 3 months ago
Selected Answer: D
To connect to s3 using direct connect Public VIF is must
upvoted 3 times
...
cldy
3 years, 6 months ago
D correct.
upvoted 1 times
...
cldy
3 years, 6 months ago
D: CORRECT
upvoted 1 times
...
tkanmani76
3 years, 6 months ago
D is the right choice. https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-access-direct-connect/
upvoted 1 times
...
AzureDP900
3 years, 7 months ago
D is the best answer for given use case
upvoted 1 times
...
nsei
3 years, 8 months ago
Answer is C based on this link https://d0.awsstatic.com/aws-answers/Accessing_VPC_Endpoints_from_Remote_Networks.pdf
upvoted 1 times
...
andylogan
3 years, 8 months ago
It's D
upvoted 1 times
...
student22
3 years, 8 months ago
D D - Data can be copied privately using Public VIF on DX. B - VPC endpoints are not accessible through DX.
upvoted 1 times
...
cloudbruv
3 years, 8 months ago
The Answer is C. I really hate AWS for putting questions to a VERY specific solution. See my below link, it literally is the use case they are asking for. https://d0.awsstatic.com/aws-answers/Accessing_VPC_Endpoints_from_Remote_Networks.pdf
upvoted 4 times
...
Shran
3 years, 8 months ago
Answer D Amazon’s primary recommended method is to run multiple VIFs, mixing both public and private.
upvoted 1 times
...
Pb55
3 years, 8 months ago
D. https://aws.amazon.com/premiumsupport/knowledge-center/public-private-interface-dx/
upvoted 1 times
...
tekkart
3 years, 8 months ago
Should be C B : not possible to use Direct Connect with VPC Endpoint : https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-access-direct-connect/?nc1=h_ls D : Possible to use a Public VIF (https://aws.amazon.com/premiumsupport/knowledge-center/connect-private-network-dx-vif/) but not secure (where is the VPN connexion over it, it is not mentioned in the question), plus you add to the transfer rate an extra cost for the appliance (https://aws.amazon.com/directconnect/pricing/) whereas on C you just pay for the transfer rate of a set of EC2 playing the role of proxy, and the LB allows for future growth
upvoted 1 times
tekkart
3 years, 8 months ago
the default with C is that it does not state how to connect from the on-prem to the VPC S3, Thus D may be the only viable option
upvoted 1 times
tekkart
3 years, 8 months ago
I will vote for D because not satisfied with the term proxy used here to copy some data... "Organizations usually implement proxy solutions to provide URL and web content filtering, IDS/IPS, data loss prevention, monitoring, and advanced threat protection. "
upvoted 2 times
tekkart
3 years, 8 months ago
It is difficult because in the question it is state that the existing connexion is under-used, why not reuse the existing, plus this "proxy" is a more secured solution to filter the access to S3 and cheaper than adding a new unsecured Public VIF ,and scalable C should be thought over carefully
upvoted 1 times
tekkart
3 years, 8 months ago
Plus the transfers occur during the weekend, so the existing Private VIF connexion is not much used, there is room for leveraging it
upvoted 1 times
...
...
...
...
student2020
3 years, 8 months ago
Connection to VPC through DX is not secure by default. However, connection to S3 can use http or https for security. D is the best option, public VIF via DX.
upvoted 1 times
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel