ANS-C01 Network Design Practice Question
A company is designing a hybrid network using AWS Direct Connect. They have a VPC with CIDR 10.0.0.0/16 and an on-premises network with CIDR 192.168.0.0/16. They want to establish a Direct Connect private virtual interface with a virtual private gateway. Which THREE steps are required to complete the connectivity? (Choose three.)
⚠ Common exam trap
Test-takers frequently confuse the customer gateway object (used for VPN) with the virtual private gateway (used for Direct Connect), leading them to incorrectly select Option E as a required step.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a virtual private gateway and attach it to the VPC.
A virtual private gateway (VGW) is the required AWS-side endpoint for a Direct Connect private virtual interface (VIF) to terminate on a single VPC. The VGW must be created and attached to the VPC before the private VIF can be associated with it, enabling private connectivity between the on-premises network and the VPC.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a Transit Gateway and attach the VPC to it.
Why it's wrong here
A Transit Gateway is not required; a virtual private gateway is sufficient.
- ✓
Create a virtual private gateway and attach it to the VPC.
Why this is correct
The virtual private gateway is the AWS side endpoint for the Direct Connect private virtual interface.
- ✓
Update the VPC route table to add a route for the on-premises CIDR pointing to the virtual private gateway.
Why this is correct
This route enables traffic from the VPC to reach on-premises.
- ✓
Configure a private virtual interface on the Direct Connect connection, associating it with the virtual private gateway.
Why this is correct
The private virtual interface provides connectivity between on-premises and the virtual private gateway.
- ✗
Create a customer gateway object in the AWS account.
Why it's wrong here
A customer gateway is used for VPN connections, not Direct Connect.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company is designing a hybrid network using AWS Direct Connect. They have a VPC with a CIDR of 10.0.0.0/16 and an on-premises network with CIDR 10.0.0.0/8. The company needs to ensure that traffic from the VPC to the on-premises network uses the Direct Connect connection and that traffic does not traverse the internet. Which TWO actions are required? (Choose TWO.)
medium- A.Attach the VPC to an AWS Transit Gateway
- ✓ B.Create a private virtual interface (VIF) on the Direct Connect connection
- ✓ C.Configure static routes or BGP to advertise the on-premises CIDR to the VPC
- D.Create a public virtual interface (VIF) on the Direct Connect connection
- E.Create a Direct Connect Gateway to connect the VPC to the on-premises network
Why B: A private virtual interface (VIF) is required to connect your VPC to an on-premises network over Direct Connect. It allows traffic to traverse the Direct Connect connection privately, bypassing the internet. Without a private VIF, you cannot route traffic from the VPC to the on-premises network over the Direct Connect link.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.