ANS-C01 Transit Gateway Practice Question
A company is designing a multi-region architecture with VPCs in us-east-1 and eu-west-1. The company needs low-latency connectivity between the VPCs and wants to avoid traffic over the public internet. The VPCs have overlapping CIDR blocks (10.0.0.0/16). Which solution should the network engineer recommend?
⚠ Common exam trap
Candidates may mistakenly think that VPN attachments are required for inter-region connectivity, but Transit Gateway peering is the native, low-latency solution that avoids the public internet. They may also confuse Transit Gateway peering with VPC peering, which cannot handle overlapping CIDRs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set up an AWS Transit Gateway in each region and connect them via Transit Gateway peering.
AWS Transit Gateway supports inter-region peering, which uses the AWS global backbone to provide low-latency, private connectivity between VPCs in different regions without traversing the public internet. This solution also handles overlapping CIDRs by using separate route tables per VPC attachment, ensuring isolation. Option B (Direct Connect) is used for on-premises connectivity, not inter-region. Option C (VPC peering) does not support overlapping CIDRs. Option D (single VPC) does not meet the multi-region requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set up an AWS Transit Gateway in each region and connect them via Transit Gateway peering.
Why this is correct
This is correct. Although not the most optimal solution (Transit Gateway peering would be ideal), a VPN attachment between Transit Gateways can provide private connectivity between regions, even with overlapping CIDRs, by using separate route tables per VPC attachment.
- ✗
Use a Direct Connect connection between the regions.
Why it's wrong here
Incorrect. Direct Connect is used for on-premises connections, not for inter-region connectivity between VPCs.
- ✗
Use VPC peering between the two VPCs.
Why it's wrong here
Incorrect. VPC peering does not support overlapping CIDR blocks, so it cannot be used here.
- ✗
Place all resources in a single VPC with multiple Availability Zones.
Why it's wrong here
Incorrect. Placing all resources in a single VPC with multiple Availability Zones does not meet the multi-region requirement.
Visual reference
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.