Mule applications need to be deployed to CloudHub so they can access on-premises database systems. These systems store sensitive and hence tightly protected data, so are not accessible over the internet.
What network architecture supports this requirement?
An Anypoint VPC connected to the on-premises network using an IPsec tunnel or AWS DirectConnect, plus matching firewall rules in the VPC and on-premises network provides a secure and reliable way for Mule applications to access sensitive on-premises databases. This setup ensures end-to-end encryption and strict firewall rules, making it ideal for accessing tightly protected data without exposing it to the public internet.
It should be A. It cannot be D or C because data is tightly protected means it has to be atleast encrypted. Cannot be B because relocation of database systems to a DMZ does not mean data is tightly protected. Its opposite. It should be A. IPsec tunnel will protect against any unauthoried access of data over public network.
A. An Anypoint VPC connected to the on-premises network using an IPsec tunnel or AWS DirectConnect, plus matching firewall rules in the VPC and on- premises network
It should be A.