ANS-C01 Network Management and Operations Practice Question
A company has a VPC with an AWS Direct Connect private VIF connected to a virtual private gateway. The on-premises network uses BGP to advertise routes to AWS. The network team wants to ensure that only specific prefixes from on-premises are accepted. They configure the virtual private gateway with a BGP community. However, after configuration, they notice that all prefixes are still being accepted. What is the MOST likely reason?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The virtual private gateway does not filter routes based on BGP communities; you need to use a prefix list.
BGP communities are tags that can be applied to routes, but the virtual private gateway (VPG) does not filter routes based on BGP communities. To filter which prefixes are accepted, you must use a prefix list or route table filtering. Therefore, simply configuring a BGP community on the VPG will not prevent all prefixes from being accepted; you need to explicitly filter using a prefix list. Option B is correct. Option A is not needed because BGP communities are already supported. Option C is not the most likely reason because even if the community is advertised, the VPG won't filter based on it. Option D is false because the community can be configured on either side, but filtering still requires a prefix list.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The virtual private gateway needs to have the BGP community enabled.
Why it's wrong here
BGP communities are always supported.
- ✓
The virtual private gateway does not filter routes based on BGP communities; you need to use a prefix list.
Why this is correct
BGP communities are tags, not filters.
- ✗
The BGP community is not being advertised by the on-premises router.
Why it's wrong here
The community is set on the AWS side.
- ✗
The BGP community must be configured on the customer gateway device.
Why it's wrong here
Community is set on AWS side.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.