Identify AWS network services and the components of a VPC, including subnets, gateways, security groups, network ACLs, Amazon Route 53 and connectivity options such as AWS VPN and AWS Direct Connect.

A company wants to link its on-premises data centre directly to its Amazon VPC so that internal servers can reach AWS resources over a private path rather than across the open public internet to a website. Which TWO AWS options establish this kind of private connectivity between the data centre and AWS? (Select TWO.)

• AAWS Site-to-Site VPN, which builds an encrypted tunnel from the data centre to the VPC over the existing internet linkcheck_circle Correct
• BAWS Direct Connect, which provides a dedicated private physical line from the data centre into AWScheck_circle Correct
• CAmazon Route 53, which directs end users to resources by resolving public domain names into IP addresses
• DAmazon CloudFront, which speeds public content delivery by caching files at edge locations near viewers
• EAn internet gateway, which lets resources in a public subnet send and receive public internet traffic

Why A is correct: Site-to-Site VPN creates an encrypted private tunnel connecting an on-premises network to a VPC quickly.

Why B is correct: Direct Connect supplies a dedicated private physical connection for consistent throughput into AWS.

Why C is wrong: Route 53 is a public DNS service for name resolution and does not create a private link to a data centre.

Why D is wrong: CloudFront accelerates public content delivery and does not connect a data centre privately to a VPC.

Why E is wrong: An internet gateway enables public internet access for a VPC and is not a private data-centre link.