Your company has a 1-Gbps AWS Direct Connect connection to AWS. Your company needs to send traffic from on-premises to a VPC owned by a partner company. The connectivity must have minimal latency at the lowest price.

Which of the following connectivity options should you choose?

A. Create a new Direct Connect connection, and set up a new circuit to connect to the partner VPC using a private virtual interface.

B. Create a new Direct Connect connection, and leverage the existing circuit to connect to the partner VPC.

C. Create a new private virtual interface, and leverage the existing connection to connect to the partner VPC.

D. Enable VPC peering and use your VPC as a transitive point to reach the partner VPC.

An organization's Security team has a requirement that all data leaving its on-premises data center be encrypted at the network layer and use dedicated connectivity. There is also a requirement to centrally log all traffic flow in Amazon VPC environments. An AWS Direct Connect connection has been ordered to build out this design.

What steps should be taken to ensure that connectivity to AWS meets these security requirements? (Choose two.)

A. Provision a public virtual interface on AWS Direct Connect and set up a VPN to each VPC.

B. Provision a private virtual interface for each VPC connection.

C. Enable VPC Flow Logs for each VPC.

D. Use AWS KMS to encrypt traffic between on-premises and AWS.

E. Provision a VPN connection to each VPC over the internet.

Your company needs an inexpensive solution to host their AD data in the cloud. They do not need all of the features of AD but do need to be able to use it with WorkSpaces. What is the best solution?

A. AD Connector

B. Hosted Microsoft AD

C. Simple AD

D. Deploy an AD server on an M3.large instance

What is NOT a benefit of CloudFront?

A. Helps ease the strain on your web servers

B. Distributes traffic evenly to EC2 instances

C. Speeds up distribution of RTMP content

D. Speeds up distribution of static and dynamic web content

A user has created a VPC with CIDR 20.0.0.0/16 with only a private subnet and VPN connection using the VPC wizard. The user wants to connect to the instance in a private subnet over SSH.

How should the user define the security rule for SSH?

A. The user can connect to a instance in a private subnet using the NAT instance

B. The user has to create an instance in EC2 Classic with an elastic IP and configure the security group of a private subnet to allow SSH from that elastic IP

C. Allow Inbound traffic on port 22 from the user's network

D. Allow Inbound traffic on port 80 and 22 to allow the user to connect to a private subnet over the internet