Courseiva
← ANS-C01
Full test
Network Security, Compliance and Governance →hardMultiple SelectObjective-mapped

ANS-C01 Network Security, Compliance and Governance Practice Question

A company wants to secure network traffic between on-premises data centers and AWS using AWS Site-to-Site VPN. Which TWO components are required to establish a VPN connection?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Customer Gateway (CGW)

AWS Site-to-Site VPN requires a Virtual Private Gateway (VGW) on the AWS side and a Customer Gateway (CGW) representing the on-premises VPN device. Option A (Transit Gateway) is not required; it's optional for complex routing. Option C (VPN Connection) is not a component; it's the logical connection object that ties VGW and CGW together. Option D (Direct Connect connection) is a different service.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Transit Gateway

    Why it's wrong here

    Transit Gateway is optional for VPN.

  • ✓

    Customer Gateway (CGW)

    Why this is correct

    CGW represents the on-premises device.

  • ✗

    VPN Connection

    Why it's wrong here

    A VPN connection is the resource that uses VGW and CGW, but it is not a 'component' in the same sense; the question asks for components required to establish it.

  • ✗

    Direct Connect connection

    Why it's wrong here

    Direct Connect is a separate service.

  • ✓

    Virtual Private Gateway (VGW)

    Why this is correct

    VGW is the AWS-side VPN concentrator.

About these practice questions

Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.