A workload needs consistent, low-latency private connectivity between a data center and AWS with predictable bandwidth — the connection must not traverse the public internet. Which option fits?
A.AWS Site-to-Site VPN
VPN tunnels encrypt traffic but run over the public internet — latency and bandwidth aren't predictable.
B.AWS Direct Connect
Correct. Dedicated private circuit = consistent latency and bandwidth.
C.VPC peering to the corporate network
Peering connects VPCs to each other — it can't reach a corporate data center.
D.AWS Client VPN
Client VPN is for end-user remote access, not site connectivity.
Why this answer
Direct Connect is a private physical link — consistent latency, dedicated bandwidth, no internet traversal. Site-to-Site VPN is private in the encrypted sense but still rides the public internet, so latency varies.
Correct answer: B · Last reviewed 2026-10-26
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Hybrid Connectivity practice session.
Practice Hybrid Connectivity