> I want to note that Direct Connect traffic is NOT encrypted by default and this is common misconception, both in real life and in exams. You must combine DX a

> I want to note that Direct Connect traffic is NOT encrypted by default and this is common misconception, both in real life and in exams. You must combine DX and S2S VPN. This is true. However, I'm not sure how to improve the card. The examples of "typically encrypted" connections on the card were HTTPS and SSH. If you SSH to an EC2 instance over a Direct Connect connection, your connection is encrypted (because you are using SSH, not because you are using Direct Connect).