ANS-C01 Network Implementation Practice Question
A company has a VPN connection between an on-premises network and AWS using two tunnels for redundancy. The BGP sessions are established, but traffic is only flowing through one tunnel. The engineer wants to ensure both tunnels are actively used. What should be configured?
⚠ Common exam trap
A common mix-up: candidates assume AWS VPN requires manual load balancing (Option A) or that static routes are needed for the second tunnel (Option B), when in fact BGP multipath with identical prefix advertisements is the correct method to achieve active-active utilization.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Advertise the same BGP prefixes over both tunnels from the on-premises router.
When both tunnels advertise the same BGP prefixes, the AWS VPN endpoint will see equal-cost paths and load-balance traffic across both tunnels using ECMP (Equal-Cost Multi-Path) routing. This ensures active-active utilization of both tunnels, which is the standard design for AWS VPN redundancy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable load balancing on the VPN connection in the AWS console.
Why it's wrong here
AWS VPN does not have a load balancing option; load balancing is achieved via BGP.
- ✗
Configure static routes for the second tunnel.
Why it's wrong here
Static routes would not allow dynamic load balancing; BGP is already in use.
- ✗
Assign different BGP ASNs to each tunnel.
Why it's wrong here
Both tunnels should use the same ASN for the customer gateway.
- ✓
Advertise the same BGP prefixes over both tunnels from the on-premises router.
Why this is correct
This allows AWS to load balance traffic across both tunnels.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.