ANS-C01 Network Implementation Practice Question
A company has a VPC with a CIDR of 10.0.0.0/16 and needs to connect to an on-premises network with CIDR 172.16.0.0/12. They are using an AWS Transit Gateway with a VPN attachment to the on-premises network. The transit gateway route table has a static route for 172.16.0.0/12 pointing to the VPN attachment. Which THREE of the following are necessary for traffic to flow from the VPC to on-premises?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The VPC route tables include a route for 172.16.0.0/12 pointing to the transit gateway
Necessary because the VPC route tables must have a route for 172.16.0.0/12 pointing to the transit gateway to forward traffic to on-premises. Option B is necessary because the VPC must be attached to the transit gateway to allow communication. Option C is necessary because the transit gateway route table must include a static route for 172.16.0.0/12 pointing to the VPN attachment. Option D is not necessary because the on-premises router does not need to advertise the route over BGP; the static route in the transit gateway suffices. Option E is not necessary because the VPN tunnel can use static routing instead of dynamic BGP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The VPC route tables include a route for 172.16.0.0/12 pointing to the transit gateway
Why this is correct
VPC instances need a route to send traffic to the transit gateway.
- ✓
The VPC is attached to the transit gateway
Why this is correct
The VPC must be attached to the transit gateway for connectivity.
- ✓
The transit gateway route table includes a route for 172.16.0.0/12 pointing to the VPN attachment
Why this is correct
The transit gateway needs a route to forward traffic to the VPN.
- ✗
The on-premises router is advertising the 172.16.0.0/12 route over BGP
Why it's wrong here
If using static routes, BGP is not required.
- ✗
The VPN tunnel is configured with dynamic BGP routing
Why it's wrong here
Static routes can be used instead of BGP.
Visual reference
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.