ANS-C01 Network Management and Operations Practice Question
A network engineer is configuring a Site-to-Site VPN connection between an on-premises network and AWS. The engineer wants to ensure that if the primary VPN tunnel goes down, traffic automatically fails over to the secondary tunnel. Which configuration is required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable dynamic routing (BGP) on the VPN connection
Dynamic routing with BGP enables automatic failover between VPN tunnels because BGP advertises routes and automatically withdraws them when a tunnel fails, causing the routing table to update and traffic to use the other tunnel. Static routes (A) require manual intervention for failover, as they do not dynamically adapt. VPN CloudHub (B) is designed to interconnect multiple VPN connections, not for failover between tunnels. Configuring a second customer gateway device (D) is necessary for redundancy but does not itself enable automatic failover without BGP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use static routes with equal-cost multipath (ECMP)
Why it's wrong here
Static routes do not automatically failover.
- ✗
Enable VPN CloudHub
Why it's wrong here
VPN CloudHub is for hub-and-spoke, not failover.
- ✓
Enable dynamic routing (BGP) on the VPN connection
Why this is correct
BGP allows dynamic route advertisement and failover.
- ✗
Configure a second customer gateway device
Why it's wrong here
Customer gateways are for second connections, not failover.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.