ANS-C01 Network Management and Operations Practice Question
A company is troubleshooting connectivity issues between an on-premises network and a VPC connected via AWS Direct Connect. The network team has verified that the virtual interface (VIF) is up and BGP is established. However, traffic is not flowing. Which two configuration issues could cause this problem? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The on-premises router is not advertising the on-premises CIDR prefix via BGP.
Correct routes on both sides are needed. If the VPC route table does not have a route to the on-premises CIDR via the Direct Connect VIF, traffic won't flow. Similarly, if the on-premises router does not advertise the correct prefix, or if the VPC's route table lacks a route, connectivity fails. Security group rules might block, but they are not the most likely if BGP is up. The VIF state is up, so that's not the issue.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The on-premises router is not advertising the on-premises CIDR prefix via BGP.
Why this is correct
If BGP does not advertise the prefix, the Direct Connect gateway will not propagate the route to the VPC.
- ✗
The AWS Direct Connect connection is not associated with the correct Direct Connect gateway.
Why it's wrong here
If BGP is established, the association is correct.
- ✗
The virtual interface is in a 'down' state.
Why it's wrong here
The scenario says the VIF is up.
- ✓
The VPC route table does not have a route to the on-premises CIDR pointing to the Direct Connect virtual interface.
Why this is correct
Missing route prevents traffic from VPC to on-premises.
- ✗
The security group attached to the EC2 instance blocks inbound traffic from on-premises.
Why it's wrong here
Security groups are stateful; if outbound is allowed, return traffic is allowed. However, initial traffic could be blocked, but this is less likely than routing issues.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.