The security team of an organization requires that all data leaving the firm's on-premises data center be encrypted at t

[answerhappygod]

The security team of an organization requires that all data leaving the firm's on-premises data center be encrypted at the network layer and transported over dedicated connection. Additionally, all traffic flowing via Amazon VPC environments must be centralized logged. This design will be implemented via an AWS Direct Connect connection.

What efforts should be done to guarantee that connection to Amazon Web Services complies with these security requirements? (Make a selection of at least two.)

A. Provision a public virtual interface on AWS Direct Connect and set up a VPN to each VPC.
B. Provision a private virtual interface for each VPC connection.
C. Enable VPC Flow Logs for each VPC.
D. Use AWS KMS to encrypt traffic between on-premises and AWS.
E. Provision a VPN connection to each VPC over the internet.