A pharma company is using hybrid network connectivity for its three-tier web application. Database servers are deployed at on-premise locations. Front end Web servers are based in AWS VPC which access these database servers. External vendors securely login to the front-end servers & access large amount of data from database servers on a regular basis. Since all the data in database servers are critical pharma formulation data, the data must be encrypted and securely sent to front end servers. As a Solution Architect which of the following connectivity options, without any administrative or cost overhead, would be a recommended option to meet this requirement?

Answer options:

A.AWS Direct connect + VPN.
B.AWS Direct connect only.
C.Transit VIF on AWS Direct connect.
D.VPN connection.

Correct Answer – A 
To meet high bandwidth & encrypted traffic, a user can use the public VIF on AWS Direct Connect with VPN. The user can establish the encrypted connectivity between AWS and your data center, office, or colocation environment.
Option B is incorrect as AWS Direct Connect itself does not encrypt data. So it cannot achieve the requirements.
Option C is incorrect as the Transit VIF is a network transit hub to interconnect VPCs in the same region, consolidating Amazon VPC routing configuration in one place. There is no reference in the question to use multiple VPCs in place and therefore this option is incorrect.
Option D is incorrect as a large amount of data needs to be transfered regularly. VPN connection has a performance issue.
For more information on AWS Direct Connect, refer to the following URL
https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-vpc-connectivity-options.pdf#welcome