ANS-C01 Network Design Practice Question
A company wants to enable communication between two VPCs (VPC A and VPC B) in the same AWS account and region. They want to use private IP addresses and avoid using the internet. Which THREE options can achieve this?
⚠ Common exam trap
A common mix-up: candidates confuse a NAT gateway with a VPC-to-VPC connectivity solution, but NAT gateways only handle outbound internet traffic and cannot forward traffic between VPCs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC peering connection
VPC peering connection (Option A) allows direct, private IP connectivity between two VPCs using the AWS global network, with no internet gateway or VPN required. Traffic stays within AWS's internal infrastructure, meeting the requirement for private IP addresses and avoiding the internet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VPC peering connection
Why this is correct
Direct private connection between VPCs.
- ✓
AWS Site-to-Site VPN connection between VPCs
Why this is correct
VPN over internet can connect VPCs privately.
- ✗
Internet gateway attached to both VPCs
Why it's wrong here
Internet gateway provides internet access, not private VPC-to-VPC.
- ✓
AWS Transit Gateway
Why this is correct
Hub-and-spoke connectivity for multiple VPCs.
- ✗
NAT gateway in each VPC
Why it's wrong here
NAT gateway is for outbound internet, not VPC-to-VPC.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company needs to connect two VPCs in the same AWS account and region. They want to use private IP addresses and avoid any single point of failure. Which solution should they use?
easy- A.AWS Transit Gateway
- ✓ B.VPC peering connection
- C.Internet Gateway and public IPs
- D.AWS Site-to-Site VPN between the VPCs
Why B: VPC peering is the correct solution because it allows direct connectivity between two VPCs using private IP addresses, with no single point of failure since traffic flows directly between the VPCs without any intermediate device or bandwidth bottleneck. AWS handles the underlying routing and redundancy, and there is no additional cost for data transfer within the same Availability Zone or region when using private IPs.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.