ANS-C01 Network Security, Compliance and Governance Practice Question
A company wants to inspect traffic between VPCs in the same region using a third-party security appliance. Which THREE components are needed? (Choose 3)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Transit Gateway
The correct answers are C, D, and E. AWS Transit Gateway (C) is required to centrally interconnect multiple VPCs and route traffic through a common inspection point. A dedicated inspection VPC (E) hosts the third-party security appliance, segregating inspection traffic from production workloads. Route tables in the inspection VPC (D) must direct inbound and outbound traffic through the appliance to enforce inspection. Option A is incorrect because VPC Peering does not support centralized inspection and creates a full mesh. Option B is incorrect because NAT Gateways only provide outbound internet access, not inter-VPC traffic inspection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPC Peering connections between all VPCs
Why it's wrong here
VPC Peering does not support centralized inspection.
- ✗
NAT Gateways in each VPC
Why it's wrong here
NAT Gateways are not for inter-VPC inspection.
- ✓
AWS Transit Gateway
Why this is correct
Transit Gateway enables hub-and-spoke connectivity.
- ✓
Route tables in the inspection VPC directing traffic through the appliance
Why this is correct
Routes ensure traffic passes through the appliance.
- ✓
A dedicated inspection VPC for the security appliance
Why this is correct
Inspection VPC hosts the appliance.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.