ANS-C01 Network Implementation Practice Question
A company has a VPC with a CIDR of 10.0.0.0/16 and needs to connect to an on-premises network using AWS Direct Connect and a Site-to-Site VPN. The on-premises network advertises 10.0.0.0/8 over BGP. The company wants to ensure that traffic to the VPC's specific subnet 10.0.1.0/24 is routed via the VPN, while all other traffic to 10.0.0.0/8 uses Direct Connect. Which THREE actions should the network engineer take?
⚠ Common exam trap
Many exam-takers think AS path prepending alone is sufficient to influence route preference, but they forget that local preference is evaluated before AS path length in BGP path selection, and that a more specific prefix advertisement (10.0.1.0/24) will always be preferred over a less specific one (10.0.0.0/8) regardless of BGP attributes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set a higher BGP local preference on the VPN routes compared to Direct Connect routes for the same prefix.
Setting a higher BGP local preference on the VPN routes makes them more preferred over Direct Connect routes for the same prefix. Since the on-premises network advertises 10.0.0.0/8 over both connections, BGP local preference is the first tiebreaker; a higher value on the VPN side ensures that traffic to 10.0.1.0/24 uses the VPN as desired.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set a higher BGP local preference on the VPN routes compared to Direct Connect routes for the same prefix.
Why this is correct
Higher local preference is preferred.
- ✓
Advertise a more specific route for 10.0.1.0/24 over the VPN BGP session.
Why this is correct
More specific routes are preferred over less specific routes.
- ✗
Disable route propagation on the VPN connection's route table.
Why it's wrong here
This would remove the VPN routes entirely.
- ✓
Prepend the AS path on the Direct Connect BGP advertisement for the 10.0.1.0/24 prefix to make it less preferred.
Why this is correct
Longer AS path is less preferred.
- ✗
Delete the VPN connection and rely solely on Direct Connect.
Why it's wrong here
The requirement is to use VPN for the specific subnet.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.