An enterprise wants a dedicated private network connection between its data center and AWS that bypasses the public internet. Which service provides it?
A.AWS Site-to-Site VPN
VPN encrypts over the internet — it's 'private' in the encryption sense, not a dedicated circuit.
B.AWS Direct Connect
Correct — dedicated physical connectivity.
C.Amazon VPC
VPC is your virtual network inside AWS, not a connection to it.
D.AWS Transit Gateway
Transit Gateway is a routing hub inside AWS — it doesn't link on-prem by itself.
Why this answer
Direct Connect is a private physical line from your facility (via a DX location) to AWS — consistent latency and bandwidth, no public internet. VPN is encrypted but still rides the internet.
Correct answer: B · Last reviewed 2026-11-01
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Core AWS Services practice session.
Practice Core AWS Services