nerdexam
Amazon

SCS-C02 · Question #34

A company is migrating one of its legacy systems from an on-premises data center to AWS. The application server will run on AWS, but the database must remain in the on-premises data center for…

The correct answer is A. AWS Site-to-Site VPN B. AWS Direct Connect. https://docs.aws.amazon.com/directconnect/latest/UserGuide/encryption-in-transit.html

Submitted by noor.lb· Mar 6, 2026Infrastructure Security

Question

A company is migrating one of its legacy systems from an on-premises data center to AWS. The application server will run on AWS, but the database must remain in the on-premises data center for compliance reasons. The database is sensitive to network latency. Additionally, the data that travels between the on-premises data center and AWS must have IPsec encryption. Which combination of AWS solutions will meet these requirements? (Choose two.)

Options

  • AAWS Site-to-Site VPN
  • BAWS Direct Connect
  • CAWS VPN CloudHub
  • DVPC peering
  • ENAT gateway

How the community answered

(47 responses)
  • A
    81% (38)
  • C
    11% (5)
  • D
    6% (3)
  • E
    2% (1)

Explanation

https://docs.aws.amazon.com/directconnect/latest/UserGuide/encryption-in-transit.html

Topics

#Site-to-Site VPN#Direct Connect#IPsec encryption#hybrid connectivity

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice