Courseiva
Network Management and OperationshardMultiple SelectObjective-mapped

ANS-C01 Network Management and Operations Practice Question

A company is using AWS Site-to-Site VPN to connect its on-premises network to a VPC. The network team wants to ensure high availability and failover. Which three actions should they take? (Choose THREE.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure both tunnels as active/active.

For high availability, use two tunnels (both active/active or active/passive), use two Customer Gateway devices for redundancy, and configure BGP for dynamic routing and fast failover. Static routes require manual intervention. A single tunnel is not redundant.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Configure both tunnels as active/active.

    Why this is correct

    Both tunnels carry traffic; if one fails, traffic shifts to the other.

  • Enable BGP on the VPN connections.

    Why this is correct

    BGP provides automatic failover and route propagation.

  • Use two Customer Gateway devices in different locations.

    Why this is correct

    Provides redundancy at the on-premises side.

  • Use static routes instead of BGP.

    Why it's wrong here

    Static routes do not provide automatic failover.

  • Configure two VPN tunnels to the same Customer Gateway.

    Why it's wrong here

    Having two tunnels to the same CGW still has a single point of failure at the on-premises device.

About these practice questions

This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.