You Have an Application That Is Processing Confidential Data

Multiple Choice

You have an application that is processing confidential data. The data is currently stored in your data center. You are moving workloads to AWS, and you need to ensure confidentiality and integrity of the data in transit to your VPC. Your company has an existing AWS Direct Connect connection. What combination of steps should you perform to set up the most cost-effective connection between your on-premises data center and AWS? (Choose three.)

A) Set up a VPC with a virtual private gateway.
B) Set up a VPC with an Internet gateway.
C) Configure a public virtual interface on your Direct Connect connection.
D) Configure a private virtual interface to the virtual private gateway.
E) Set up an IPsec tunnel between your customer gateway and a software VPN on Amazon EC2 in the VPC.
F) Set up an IPsec tunnel between your customer gateway appliance and the virtual private gateway.