A company is migrating a latency-sensitive database to the cloud. Engineers need a dedicated, low-latency path between the on-premises data center and the provider's VPC that avoids the public internet and reduces encryption overhead, while still allowing the existing IPsec VPN to operate as a backup. Which connectivity option BEST meets these requirements?
Configure SD-WAN tunnels that dynamically use multiple public ISPs
Enable dynamic NAT traversal to route traffic through publicly addressable endpoints
Establish a standard site-to-site IPsec VPN over the internet
Provision a dedicated private circuit (e.g., AWS Direct Connect or Azure ExpressRoute)
A dedicated private circuit (for example, AWS Direct Connect or Azure ExpressRoute) provides a physical or logically isolated connection that never traverses the public internet. This delivers consistent low latency, high throughput, and stronger security controls than internet-based tunnels. A standard site-to-site VPN, SD-WAN over public ISPs, or dynamic NAT routing each rely on shared internet paths that introduce variable latency and additional encryption overhead, making them less suitable for mission-critical, performance-sensitive workloads.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a dedicated link in networking?
Open an interactive chat with Bash
How does a dedicated link improve security and performance?