A Company's On-Premises Networks Are Connected to VPCs Using an AWS

question 63

Multiple Choice

A company's on-premises networks are connected to VPCs using an AWS Direct Connect gateway. The company's on-premises application needs to stream data using an existing Amazon Kinesis Data Firehose delivery stream. The company's security policy requires that data be encrypted in transit using a private network. How should the company meet these requirements?

• A) Create a VPC endpoint for Kinesis Data Firehose. Configure the application to connect to the VPC endpoint.
• B) Configure an IAM policy to restrict access to Kinesis Data Firehose using a source IP condition. Configure the application to connect to the existing Firehose delivery stream.
• C) Create a new TLS certificate in AWS Certificate Manager (ACM). Create a public-facing Network Load Balancer (NLB) and select the newly created TLS certificate. Configure the NLB to forward all traffic to Kinesis Data Firehose. Configure the application to connect to the NLB.
• D) Peer the on-premises network with the Kinesis Data Firehose VPC using Direct Connect. Configure the application to connect to the existing Firehose delivery stream.

---

Definitions:

Economic Power

The ability of an entity or country to influence or control economic conditions and policies, often through wealth, production capacity, or market influence.

Dominant Position

A term used in competition law to describe a situation where a company or entity has a significant advantage over competitors in the marketplace.

Horizontal Restraint

A practice that involves agreements among competitors at the same level of the market to restrict competition.

Chain of Distribution

The sequence of intermediaries through which a product or service passes until it reaches the end consumer.