Courseiva
Network ImplementationeasyMultiple ChoiceObjective-mapped

ANS-C01 Network Implementation Practice Question

A company is using AWS Direct Connect to connect its on-premises data center to a VPC. The company wants to use a single Direct Connect connection to connect to multiple VPCs in different AWS accounts. Which AWS service should be used to achieve this?

⚠ Common exam trap

A common mix-up: candidates confuse Transit Gateway with Direct Connect Gateway, thinking Transit Gateway can natively handle multi-account Direct Connect sharing, but Transit Gateway requires a Direct Connect Gateway attachment to do so, making the Direct Connect Gateway the essential component for this specific use case.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Direct Connect Gateway

A Direct Connect Gateway (DX Gateway) is the correct service because it allows a single Direct Connect connection to be associated with multiple VPCs across different AWS accounts and regions. The DX Gateway acts as a regional or global transit hub, enabling private connectivity from on-premises to multiple VPCs without needing separate Direct Connect connections for each VPC. This is achieved by associating the DX Gateway with virtual private gateways (VGWs) in each target VPC, and then using AWS Resource Access Manager (RAM) to share the DX Gateway with other accounts.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Direct Connect Gateway

    Why this is correct

    Direct Connect Gateway enables connectivity to multiple VPCs over a single Direct Connect connection.

  • Transit Gateway

    Why it's wrong here

    Transit Gateway can be used with Direct Connect Gateway, but the question asks for the service that allows a single Direct Connect connection to reach multiple VPCs across accounts.

  • AWS Site-to-Site VPN

    Why it's wrong here

    VPN is a different technology; Direct Connect Gateway is the correct service.

  • VPC Peering

    Why it's wrong here

    VPC peering does not extend Direct Connect connectivity.

About these practice questions

This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.