CloudGuild · Blog · Cheat sheets · Lessons · Certifications
AWS Certified Solutions Architect - Associate Exam Question Walkthrough
Understanding secure data transfer options is crucial for the AWS Certified Solutions Architect - Associate exam. Let's break down a key question.
A healthcare company needs to ensure that their patient data is securely shared between their on-premises environment and AWS. What is the best solution to securely transfer this data while ensuring it remains encrypted during transit?
Options:
- A. AWS DataSync
- B. AWS VPN
- C. AWS Direct Connect
- D. Amazon S3 Transfer Acceleration
Think before you scroll
Consider the importance of data encryption during transit, especially in sensitive environments like healthcare. Weigh the options based on their ability to provide a secure connection and encryption capabilities.
The answer
The correct option is B. AWS VPN. It provides a secure and encrypted connection over the internet between the on-premises network and AWS, making it suitable for securely sharing sensitive data.
Why the other options lose
- A. AWS DataSync: This service is designed for transferring data, but it does not specifically focus on encryption. While it can move data efficiently, it does not ensure that the data is encrypted during transit.
- C. AWS Direct Connect: This option offers a dedicated connection to AWS but does not provide encryption by default. While it is reliable for data transfer, without additional security measures, it may not meet the encryption requirement.
- D. Amazon S3 Transfer Acceleration: Although this service optimizes data uploads to S3, it does not guarantee encryption during transit. Its primary purpose is to speed up data transfer rather than secure it.
The concept behind it
Understanding secure data transfer methods is crucial. AWS VPN is a key service that encrypts data in transit over the internet, making it ideal for sensitive information. Remember, any time you need secure communication between on-premises and AWS, look for solutions that explicitly state encryption capabilities.
Exam trap to remember
Always prioritize solutions that explicitly provide encryption for sensitive data transfers, especially in regulated industries like healthcare.