You are helping a team to build up the AWS infrastructure by configuring an AWS Direct Connect dedicated network connection with the AWS VPN. There will be BGP connections established between the AWS Direct Connect and the router in the customer network. With this network configuration, which of the following statements is true?

Answer options:

A.The data in transit is not encrypted under such a configuration.
B.Only the VPN connection will be charged, and the AWS Direct Connect is free of charge.
C.This configuration provides a more consistent network experience than an internet-based VPN connection.
D.An AWS Transit Gateway is used for this network configuration.

Correct Answer: C
Option A is incorrect because although AWS Direct Connect itself does not encrypt the traffic in transit, the VPN IPSec connection encrypts the data.
Option B is incorrect because AWS Direct Connect is not free under such a configuration. Please check the reference in https://aws.amazon.com/directconnect/pricing/.
Option C is CORRECT because the configuration uses AWS Direct Connect based on a dedicated network connection. So a more consistent network experience can be achieved. Please check the following snapshot:
Option D is incorrect because AWS Transit Gateway is a network transit hub used to interconnect VPCs and customer networks. It is not needed under such a network configuration.
Reference:
https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect-vpn.html