ANS-C01 Network Design Practice Question
A company is designing a hybrid network using AWS Direct Connect and VPN backup. The company wants to ensure that traffic always uses Direct Connect when it is available. Which TWO configurations should be implemented? (Choose TWO.)
⚠ Common exam trap
AWS often tests the distinction between outbound and inbound traffic manipulation; the trap here is that candidates may incorrectly apply MED (which influences inbound traffic) or think disabling BGP is acceptable, when the correct approach for outbound traffic preference is to manipulate AS_PATH length or local preference.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use AS_PATH prepending on the VPN BGP session to make the VPN path less preferred.
AS_PATH prepending on the VPN BGP session increases the AS_PATH length for routes advertised over the VPN, making them less preferred compared to the same routes learned over Direct Connect with a shorter AS_PATH. BGP selects the path with the shortest AS_PATH length, so traffic will use Direct Connect when it is available. This is a standard technique for influencing outbound traffic path selection in a hybrid network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use AS_PATH prepending on the VPN BGP session to make the VPN path less preferred.
Why this is correct
Longer AS_PATH is less preferred.
- ✓
Advertise more specific prefixes over Direct Connect and less specific prefixes over VPN.
Why this is correct
More specific routes are preferred.
- ✗
Disable BGP on the VPN connection to force traffic to Direct Connect.
Why it's wrong here
Disabling BGP would remove the backup.
- ✗
Set a lower MED value on the Direct Connect BGP session.
Why it's wrong here
MED is used within an AS, not typically between different AS paths.
- ✗
Advertise the same prefixes over both connections with the same AS_PATH length.
Why it's wrong here
Equal AS_PATH leads to tie-breaking that may not favor Direct Connect.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.