Courseiva
Network ImplementationeasyMultiple ChoiceObjective-mapped

ANS-C01 Network Implementation Practice Question

A company wants to securely connect their on-premises data center to AWS using a site-to-site VPN. They have multiple branch offices that also need to connect to AWS. Which AWS service should they use to simplify the management of multiple VPN connections?

⚠ Common exam trap

Many candidates confuse VPN CloudHub with Transit Gateway, but CloudHub is a simpler, older solution that lacks the centralized management, advanced routing policies, and scalability of Transit Gateway, which is the modern best practice for multi-site VPN connectivity.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

AWS Transit Gateway

AWS Transit Gateway (C) acts as a central hub that interconnects VPCs and on-premises networks, allowing you to manage multiple site-to-site VPN connections and branch office attachments through a single gateway. This simplifies routing and reduces operational overhead compared to managing individual VPN connections between each branch and each VPC.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • VPC Peering

    Why it's wrong here

    VPC Peering connects VPCs, not on-premises networks.

  • AWS Direct Connect

    Why it's wrong here

    Direct Connect is a dedicated network connection but does not inherently simplify multiple VPN connections.

  • AWS Transit Gateway

    Why this is correct

    Transit Gateway provides a hub-and-spoke model to connect multiple VPNs and VPCs.

  • VPN CloudHub

    Why it's wrong here

    VPN CloudHub uses a Virtual Private Gateway but is less scalable and lacks advanced routing features of Transit Gateway.

About these practice questions

This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.