ANS-C01 Public VIF Practice Question
A company uses AWS Direct Connect with a public VIF to access Amazon S3. The network team notices that S3 traffic is taking a suboptimal path over the internet instead of the Direct Connect. Which configuration is MOST likely missing?
⚠ Common exam trap
Candidates often think VPC route tables need updating for public VIF, but the real issue is on-premises routing or, in this case, missing VPC endpoint for S3.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A VPC endpoint for S3 is not configured
For a public VIF, S3 traffic from on-premises should use Direct Connect if the on-premises router is configured to route S3 prefixes to the Direct Connect connection. The provided options do not address this missing configuration. None of the options (VPC route tables, VIF association, Direct Connect gateway, or VPC endpoint) are correct for this scenario. The question may need to be revised to include an appropriate option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The VPC route tables are not updated to include the Direct Connect route
Why it's wrong here
Incorrect. For a public VIF, VPC route tables are not involved in routing traffic to S3.
- ✗
The public VIF is not associated with the VPC
Why it's wrong here
Incorrect. Public VIFs are not associated with VPCs; they provide direct access to public services.
- ✗
A Direct Connect gateway is not attached to the VPC
Why it's wrong here
Incorrect. Direct Connect gateways are used with private VIFs, not public VIFs.
- ✓
A VPC endpoint for S3 is not configured
Why this is correct
Correct. If S3 traffic originates from a VPC, a VPC endpoint for S3 is needed to keep traffic private. Without it, traffic may take a suboptimal path over the internet.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.