You Run a Well-Architected, Multi-AZ Application in the Eu-Central-1 (Frankfurt)

You run a well-architected, multi-AZ application in the eu-central-1 (Frankfurt) AWS region. The application is hosted in a VPC and is only accessed from the corporate network. To support large volumes of data transfer and administration of the application, you use a single 10-Gbps AWS Direct Connect connection with multiple private virtual interfaces. As part of a review, you decide to improve the resilience of your connection to AWS and make sure that any additional connectivity does not share the same Direct Connect routers at AWS. You need to provide the best levels of resilience to meet the application's needs. Which two options should you consider? (Choose two.)

A) Install a second 10-Gbps Direct Connect connection to the same Direct Connection location.
B) Deploy an IPsec VPN over a public virtual interface on a new 10-Gbps Direct Connect connection.
C) Install a second 10-Gbps Direct Connect connection to a Direct Connect location in eu-west-1.
D) Deploy an IPsec VPN over the Internet to the eu-west-1 region for diversity.
E) Install a second 10-Gbps Direct Connect connection to a second Direct Connect location for eu-central-1.