ANS-C01 Network Design Practice Question
A company wants to connect two VPCs in the same AWS region using a hub-and-spoke model. Which AWS service should be used to route traffic between the VPCs through a central inspection VPC?
⚠ Common exam trap
The ANS-C01 exam often tests the misconception that VPC Peering can be used for hub-and-spoke topologies, but candidates must remember that VPC Peering does not support transitive routing, so traffic cannot pass through a central inspection VPC.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Transit Gateway
AWS Transit Gateway is the correct choice because it acts as a central hub that connects multiple VPCs and on-premises networks in a hub-and-spoke topology. It allows you to route traffic between VPCs through a central inspection VPC for security or compliance purposes, using route tables to control traffic flow without requiring individual peering connections.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Direct Connect
Why it's wrong here
Direct Connect is used for dedicated network connections from on-premises to AWS, not for VPC-to-VPC routing.
- ✓
AWS Transit Gateway
Why this is correct
Transit Gateway enables hub-and-spoke connectivity with centralized routing and inspection.
- ✗
AWS VPN CloudHub
Why it's wrong here
VPN CloudHub is for connecting multiple VPN sites, not VPCs.
- ✗
VPC Peering
Why it's wrong here
VPC Peering does not support transitive routing; each peering is a direct one-to-one connection.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.