Question 781 of 1,621
ANS-C01 Network Management and Operations Practice Question
A company is using AWS Transit Gateway to connect multiple VPCs and on-premises networks. The network team observes that traffic between two VPCs (VPC A and VPC B) is not being forwarded correctly. The transit gateway route table is configured with static routes for the VPC CIDRs. Which THREE steps should the engineer take to troubleshoot this issue? (Choose THREE.)
⚠ Common exam trap
AWS often tests the misconception that NAT Gateway or Direct Connect configurations are involved in VPC-to-VPC routing, when in fact Transit Gateway relies solely on route tables and attachment associations for inter-VPC traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the transit gateway route table contains the CIDR blocks of both VPCs.
The transit gateway route table must contain the CIDR blocks of both VPCs for traffic to be forwarded between them. Without these static routes, the transit gateway has no destination to route the traffic, causing it to be dropped. Verifying the route table entries ensures the necessary paths exist.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Verify that the transit gateway route table contains the CIDR blocks of both VPCs.
Why this is correct
The transit gateway route table must have routes for both VPC CIDRs to forward traffic between them.
- ✓
Check the route tables in VPC A and VPC B to ensure they have routes pointing to the transit gateway for the other VPC's CIDR.
Why this is correct
Each VPC must have a route to the other VPC's CIDR pointing to the transit gateway attachment.
- ✓
Check the association of the VPC attachments with the transit gateway route table.
Why this is correct
Each VPC attachment must be associated with the correct route table to use its routes.
- ✗
Check the Direct Connect virtual interface status.
Why it's wrong here
Direct Connect is for on-premises connectivity, not VPC-to-VPC communication.
- ✗
Verify that the NAT Gateway in each VPC is properly configured.
Why it's wrong here
NAT Gateways are for outbound internet traffic, not VPC-to-VPC routing.
Visual reference
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 30, 2026
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.