An international company provides early warning about tsunamis. The company plans to use IoT devices to monitor sea waves around theworld. The data that is collected by the IoT devices must reach the company's infrastructure on AWS as quickly as possible. The company isusing three operation centers around the world. Each operation center is connected to AWS through Its own AWS Direct Connect connection.Each operation center is connected to the internet through at least two upstream internet service providers.The company has its own provider-independent (PI) address space. The IoT devices use TCP protocols for reliable transmission of the datathey collect. The IoT devices have both landline and mobile internet connectivity. The infrastructure and the solution will be deployed inmultiple AWS Regions. The company will use Amazon Route 53 for DNS services.A network engineer needs to design connectivity between the IoT devices and the services that run in the AWS Cloud.Which solution will meet these requirements with the HIGHEST availability?

A. Set up an Amazon CloudFront distribution with origin failover. Create an origin group for each Region where the solution is deployed.

B. Set up Route 53 latency-based routing. Add latency alias records. For the latency alias records, set the value of Evaluate Target Healthto Yes.

C. Set up an accelerator in AWS Global Accelerator. Configure Regional endpoint groups and health checks.

D. Set up Bring Your Own IP (BYOIP) addresses. Use the same PI addresses for each Region where the solution is deployed.

An insurance company is planning the migration of workloads from its on-premises data center to the AWS Cloud. The company requires end-to-end domain name resolution. Bi-directional DNS resolution between AWS and the existing on-premises environments must be established.The workloads will be migrated into multiple VPCs. The workloads also have dependencies on each other, and not all the workloads will bemigrated at the same time.Which solution meets these requirements?

A. Configure a private hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolverinbound and outbound endpoints in an egress VPC. Define Route 53 Resolver rules to forward requests for the on-premises domains to theon-premises DNS resolver. Associate the application VPC private hosted zones with the egress VPC, and share the Route 53 Resolver ruleswith the application accounts by using AWS Resource Access Manager. Configure the on-premises DNS servers to forward the clouddomains to the Route 53 inbound endpoints.

B. Configure a public hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolverinbound and outbound endpoints in an egress VPC. Define Route 53 Resolver rules to forward requests for the on-premises domains to theon-premises DNS resolver. Associate the application VPC private hosted zones with the egress VPC. and share the Route 53 Resolver ruleswith the application accounts by using AWS Resource Access Manager. Configure the on-premises DNS servers to forward the clouddomains to the Route 53 inbound endpoints.

C. Configure a private hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolverinbound and outbound endpoints in an egress VPDefine Route 53 Resolver rules to forward requests for the on-premises domains to theon-premises DNS resolver. Associate the application VPC private hosted zones with the egress VPand share the Route 53 Resolver ruleswith the application accounts by using AWS Resource Access Manager. Configure the on-premises DNS servers to forward the clouddomains to the Route 53 outbound endpoints.

D. Configure a private hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolverinbound and outbound endpoints in an egress VPC. Define Route 53 Resolver rules to forward requests for the on-premises domains to theon-premises DNS resolver. Associate the Route 53 outbound rules with the application VPCs, and share the private hosted zones with theapplication accounts by using AWS Resource Access Manager. Configure the on-premises DNS servers to forward the cloud domains to theRoute 53 inbound endpoints.

A company is migrating applications from a data center to AWS. Many of the applications will need to exchange data with the company's on-premises mainframe.The company needs to achieve 4 Gbps transfer speeds to meet peak traffic demands. A network engineer must design a highly availablesolution that maximizes resiliency. The solution must be able to withstand the loss of circuits or routers.Which solution will meet these requirements?

A. Order four 10 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate one connection from eachDirect Connect location to a router at the company location. Terminate the other connection from each Direct Connect location to adifferent router at the company location.

B. Order two 10 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate the connection from eachDirect Connect location to a different router at the company location.

C. Order four 1 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate one connection from eachDirect Connect location to a router at the company location. Terminate the other connection from each Direct Connect location to adifferent router at the company location.

D. Order two 1 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate the connection from each DirectConnect location to a different router at the company location.

A company's AWS environment has two VPCs. VPC A has a CIDR block of 192.168.0.0/16. VPC B has a CIDR block of 10.0.0.0/16. Each VPC isdeployed in a separate AWS Region. The company has remote users who work outside the company's offices. These users need to connect toan application that is running in the VPCs.Traffic to and from the VPCs over the internet must be encrypted. A network engineer must set up connectivity between the remote users andthe VPCs.Which combination of steps should the network engineer take to meet these requirements with the LEAST management overhead? (Choosethree.)

A. Establish an AWS Site-to-Site VPN connection between VPC A and VPC B.

B. Establish a VPC peering connection between VPC A and VPC B.

C. Create an AWS Client VPN endpoint in VPC A and VPC B Add an authorization rule to grant access to VPC A and VPC B.

D. Create an AWS Client VPN endpoint in VPC A Add an authorization rule to grant access to VPC A and VPC B.

E. Add a route to the AWS Client VPN endpoint's route table to direct traffic to VPC B.

F. Add a route to the AWS Client VPN endpoint's route table to direct traffic to VPC A.

A financial company that is located in the us-east-1 Region needs to establish secure connectivity to AWS. The company has two on-premisesdata centers, each located within the same Region. The company's network team needs to establish hybrid connectivity to its AWSenvironment with reliable and consistent connectivity.The connection must provide access to the company's private resources inside its AWS environment. The resources are located in the us-east-1 and us-west-2 Regions. The connection must allow resources from the corporate networks to send large amounts of data to Amazon S3 overthe same connection. To meet compliance requirements, the connection must be highly available and must provide encryption for all packetsthat are sent between the on-premises location and any services on AWS.Which combination of steps should the network team take to meet these requirements? (Choose two.)

A. Set up a private VIF to send data to Amazon S3. Use an AWS Site-to-Site VPN connection over the private VIF to encrypt data in transitto the VPCs in us-east-1 and us-west-2.

B. Set up an AWS Direct Connect connection to each of the company's data centers.

C. Set up an AWS Direct Connect connection from one of the company's data centers to us-east-1 and us-west-2.

D. Set up a public VIF to send data to Amazon S3. Use an AWS Site-to-Site VPN connection over the public VIF to encrypt data in transit tothe VPCs in us-east-1 and us-west-2.

E. Set up a transit VIF for an AWS Direct Connect gateway to send data to Amazon S3. Create a transit gateway. Associate the transitgateway with the Direct Connect gateway to provide secure communications from the company's data centers to the VPCs in us-east-1 andus-west-2.