ANS-C01 Network Design Practice Question
A company is designing a hybrid network using AWS Direct Connect. They want to ensure high availability and minimize downtime. Which TWO actions should they take?
⚠ Common exam trap
It's easy for candidates to think a single Direct Connect connection with multiple virtual interfaces provides redundancy, but it does not protect against physical link failure; true high availability requires diverse physical connections and a backup path like VPN.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set up a site-to-site VPN as a backup for the Direct Connect connection
A site-to-site VPN provides a cost-effective, encrypted backup path over the internet if the Direct Connect connection fails. This ensures high availability by maintaining connectivity through an alternate path, which is a best practice for hybrid network designs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set up a site-to-site VPN as a backup for the Direct Connect connection
Why this is correct
VPN provides a backup path if Direct Connect fails.
- ✗
Use a single customer router for both connections
Why it's wrong here
Using a single customer router for both Direct Connect connections creates a single point of failure at the network edge; if that router fails, both virtual interfaces are lost, violating the high-availability requirement. This design is tempting because it simplifies BGP configuration and reduces hardware cost, and it would be correct in a scenario where cost containment is the priority and the company accepts degraded availability during router maintenance.
- ✗
Provision a single Direct Connect connection with two virtual interfaces
Why it's wrong here
A single connection is a single point of failure regardless of VIFs.
- ✓
Provision Direct Connect connections at two different Direct Connect locations
Why this is correct
Diverse locations provide redundancy against location failures.
- ✗
Use the same BGP ASN on both Direct Connect connections
Why it's wrong here
Using the same ASN is allowed but not a high availability measure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.