ANS-C01 Network Implementation Practice Question
A company has a Direct Connect connection with multiple Virtual Interfaces (VIFs) to an on-premises network. The VIFs are associated with a Direct Connect Gateway that is attached to multiple VPCs. The company is experiencing asymmetric routing and wants to ensure that traffic from on-premises to the VPCs always uses the same VIF. Which configuration should be implemented?
⚠ Common exam trap
A common mix-up: candidates confuse AS_PATH prepending (which affects outbound traffic from AWS) with BGP communities (which can influence inbound traffic from on-premises), leading them to select Option A despite it solving the wrong direction of traffic flow.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure BGP communities on the VIFs to influence route preference
BGP communities allow you to tag routes on the Direct Connect VIFs with specific community values (e.g., 7224:7100 for the primary VIF, 7224:7200 for the secondary VIF). AWS Direct Connect uses these community tags to influence route preference, ensuring that traffic from on-premises to the VPCs consistently uses the designated primary VIF. This mechanism provides granular control over path selection without modifying AS_PATH or local preference, directly addressing asymmetric routing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AS_PATH prepending on the VIFs to make one path more preferred
Why it's wrong here
AS_PATH prepending makes a path less preferred, not more.
- ✗
Enable Jumbo Frames on the Direct Connect connection
Why it's wrong here
Jumbo Frames are for MTU, not routing preferences.
- ✗
Set the Local Preference attribute on the AWS side
Why it's wrong here
Local Preference is a BGP attribute set on the receiving router, not on the AWS side.
- ✓
Configure BGP communities on the VIFs to influence route preference
Why this is correct
BGP communities allow tagging routes to influence the on-premises router's preference.
Quick reference
Asymmetric Encryption Algorithm Comparison
| Algorithm | Key Exchange | Signatures | Equivalent Security Key | Notes |
|---|---|---|---|---|
| RSA-3072 | Yes | Yes | 128-bit | Widely deployed; slow for bulk data |
| ECDSA P-256 | No | Yes | 128-bit | Fast signatures; standard TLS certs |
| ECDH / ECDHE | Yes | No | 128-bit | Perfect forward secrecy in TLS 1.3 |
| DH / DHE | Yes | No | 128-bit (3072-bit key) | Replaced by ECDHE in modern TLS |
| Ed25519 | No | Yes | ~128-bit | SSH keys, modern PKI |
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.