Direct Connect Resiliency

Correct Answer: Set up a hosted connection along with a dedicated connection

Setting up a hosted connection along with a dedicated connection is the most cost-efficient way to ensure Direct Connect resiliency, as it provides an additional connection without the need for purchasing another dedicated connection. Other options either do not provide the same level of resiliency or may result in higher costs.

Correct Answer: Establish a redundant Direct Connect connection at a secondary Direct Connect location.

The best practice to enhance the resilience of an AWS Direct Connect deployment is to establish a redundant Direct Connect connection at a secondary Direct Connect location. This approach ensures that if one connection goes down (due, for instance, to a data center outage or network issues at one location), the other connection can take over, thus maintaining the enterprise's operations. This is in line with AWS recommendations on implementing a resilient architecture. Explanation for other answers: - Configuring Direct Connect to failover to a VPN connection during maintenance windows only is not ideal for resilience because disruptions can occur at any time, not just during scheduled maintenance. Thus, this option does not guarantee continuous operations. - Deploying a single Direct Connect connection with multiple virtual interfaces for different VPCs might help with network organization but does not provide resilience against physical connection failures as there is no redundancy. - Using a dedicated Direct Connect connection for each VPC may improve bandwidth and performance but is costly and does not necessarily improve resilience. If the single Direct Connect location experiences a disruption, all connections would be affected regardless of their dedicated nature.

Correct Answer: Set up Direct Connect Gateways with multiple virtual interfaces to different regions

Setting up Direct Connect Gateways with multiple virtual interfaces to different regions is the most recommended solution as it provides the ability to connect to multiple VPCs in different regions through a single Direct Connect Gateway. Other options do not provide the same level of resilience and connectivity for multiple VPCs in different regions.