ANS-C01 Network Management and Operations Practice Question
A company is migrating its on-premises data center to AWS. The network team needs to establish a site-to-site VPN connection with dynamic routing using BGP. The on-premises router supports BGP but does not support BGP communities. The VPN connection is established, but the VPC does not learn the on-premises routes. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The on-premises router is not advertising any prefixes over BGP
For the VPC to learn on-premises routes via BGP, the on-premises router must advertise its prefixes over the BGP session. Without any route advertisement, the VPC cannot learn the routes regardless of VPN tunnel status. Option A is incorrect because authentication method (pre-shared keys vs certificates) does not affect route advertisement. Option B is incorrect because with dynamic routing using BGP, a static route is not required; BGP automatically exchanges routes if both peers advertise them. Option C is incorrect because the scenario states the VPN connection is established, implying the tunnel is UP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The VPN tunnel uses pre-shared keys instead of certificates
Why it's wrong here
Pre-shared keys are fine for BGP.
- ✗
The VPC route table needs a static route to the on-premises CIDR
Why it's wrong here
With BGP, routes are propagated automatically.
- ✗
The VPN tunnel is not in a UP state
Why it's wrong here
The VPN connection is established, so the tunnel is UP.
- ✓
The on-premises router is not advertising any prefixes over BGP
Why this is correct
Without advertisement, no routes are learned.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.