An office connects to AWS over Direct Connect, but a single DX failure must not sever connectivity. What's the standard cost-effective backup path while a second DX is ordered?
A.A second private VIF on the same DX connection
Same physical DX — the same outage kills both VIFs.
B.A Site-to-Site VPN over the internet as the failover path
Correct. Independent medium (internet) = real path diversity.
C.Increase the DX bandwidth
Bandwidth doesn't fix a dead circuit.
D.Enable DX gateway
DXGW aggregates connectivity; it isn't redundant media.
Why this answer
A Site-to-Site VPN is the documented interim/backup path for DX — instant to provision, uses the internet as an independent path, and BGP failover happens automatically. A second VIF on the same connection shares the same physical failure domain; DX gateway routes traffic, it doesn't add path redundancy.
Correct answer: B · Last reviewed 2026-11-02
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Hybrid Connectivity practice session.
Practice Hybrid Connectivity