ANS-C01 Network Implementation Practice Question
A company has a Direct Connect connection with a private VIF to a VPC. They also have a Site-to-Site VPN connection to the same VPC as a backup. The on-premises router is advertising the same prefixes over both connections. The company wants to ensure that traffic uses Direct Connect when available and fails over to VPN if Direct Connect goes down. Which configuration should be applied?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Prepend AS path on the BGP advertisements over the VPN connection to make the path less preferred.
To prefer Direct Connect over VPN, adjust BGP attributes on the on-premises router. Prepend AS path on the VPN BGP advertisements to increase the AS path length, making the Direct Connect path shorter and thus preferred. This ensures failover to VPN if Direct Connect fails. Option A is incorrect because setting higher MED on Direct Connect would make it less preferred, not more. Option B is incorrect because disabling BGP on VPN removes the backup connection entirely. Option D is incorrect because setting higher local preference on VPN BGP advertisements would make VPN preferred, which is the opposite of the desired behavior. Local preference is typically set on the AWS side, not on-premises.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set a higher MED value on the Direct Connect BGP advertisements.
Why it's wrong here
Higher MED makes the path less preferred; you want Direct Connect to be more preferred, so lower MED or higher on VPN.
- ✗
Disable BGP on the VPN connection to force traffic to Direct Connect.
Why it's wrong here
This would remove the backup VPN, not provide failover capability.
- ✓
Prepend AS path on the BGP advertisements over the VPN connection to make the path less preferred.
Why this is correct
AS path prepending makes the VPN path longer, so Direct Connect path (shorter AS path) is preferred.
- ✗
Set a higher local preference on the VPN BGP advertisements.
Why it's wrong here
Higher local preference makes the path more preferred, which is opposite of desired.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.