ANS-C01 Network Design Practice Question
A company has a Direct Connect connection with a private virtual interface (VIF) to a VPC. The company wants to add a second VPC in the same AWS Region using the same Direct Connect connection. Which solution meets the requirements with the least operational effort?
⚠ Common exam trap
AWS often tests the misconception that a single private VIF can only connect to one VPC, leading candidates to choose Option D, but the Direct Connect gateway enables multi-VPC connectivity with the same VIF.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a Direct Connect gateway and associate both VPCs, then associate the private VIF with the Direct Connect gateway
A Direct Connect gateway allows a single private virtual interface (VIF) to connect to multiple VPCs in the same AWS Region, eliminating the need for multiple VIFs or complex routing. By associating both VPCs with the Direct Connect gateway and attaching the private VIF to it, you achieve the goal with minimal operational overhead, as the gateway handles the routing between the on-premises network and the VPCs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a Direct Connect gateway and associate both VPCs, then associate the private VIF with the Direct Connect gateway
Why this is correct
Allows multiple VPCs to use the same private VIF via the Direct Connect gateway.
- ✗
Set up a VPN connection over the Direct Connect for the second VPC
Why it's wrong here
Unnecessary complexity.
- ✗
Create a transit virtual interface and attach it to a transit gateway, then attach both VPCs
Why it's wrong here
This requires a transit gateway and transit VIF, which is more effort than a Direct Connect gateway.
- ✗
Create a second private virtual interface for the second VPC
Why it's wrong here
Creating a second private virtual interface fails because each private VIF connects exclusively to a single VPC, requiring individual management for every additional VPC. This approach significantly increases operational overhead when managing multiple VPCs in the same region, contravening the 'least operational effort' requirement. This option is tempting as private VIFs are indeed used to connect a VPC to Direct Connect; it would be appropriate if connecting to a single, isolated VPC or if connecting to VPCs in different AWS accounts without a shared Transit Gateway.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.