Courseiva
Network DesignmediumMultiple ChoiceObjective-mapped

ANS-C01 Network Design Practice Question

Network Topology
$ aws directconnect describe-virtual-interfacesvirtual-interface-id dxvif-12345678Refer to the exhibit.```"virtualInterfaces": ["ownerAccount": "123456789012","virtualInterfaceId": "dxvif-12345678","location": "EqDC1","connectionId": "dxcon-12345678","virtualInterfaceType": "private","virtualInterfaceName": "MyPrivateVIF","vlan": 100,"asn": 64512,"authKey": "abc123","amazonAddress": "169.254.10.1/30","customerAddress": "169.254.10.2/30","addressFamily": "ipv4","virtualInterfaceState": "available","customerRouterConfig": "...","virtualGatewayId": "vgw-12345678","directConnectGatewayId": null,"routeFilterPrefixes": [{"cidr": "10.0.0.0/16"}

A network engineer is troubleshooting a Direct Connect private VIF. The VIF is in 'available' state but traffic is not flowing to the VPC. The VGW is attached to the VPC. What is the most likely cause?

⚠ Common exam trap

Many candidates assume an 'available' VIF and established BGP automatically mean traffic flows, but they overlook the critical requirement of a VPC route table entry pointing to the VGW as the next hop.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The VPC route table lacks a route to the on-premises network pointing to the VGW.

When a Direct Connect private VIF is in the 'available' state, the physical and logical layer 2 connectivity is established, and BGP sessions are typically up. However, traffic still cannot flow to the VPC unless the VPC route table contains a route that directs traffic destined for the on-premises network to the Virtual Private Gateway (VGW). Without this route, the VPC has no path to send traffic over the Direct Connect connection, even though the VIF and BGP are operational.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The VPC route table lacks a route to the on-premises network pointing to the VGW.

    Why this is correct

    Without this route, traffic cannot be forwarded.

  • The route filter prefix for the VPC CIDR is misconfigured.

    Why it's wrong here

    It shows 10.0.0.0/16, which is correct.

  • BGP is not established between the on-premises router and the VGW.

    Why it's wrong here

    BGP is used for route exchange, but the VIF state indicates routing is configured.

  • The VIF state is not 'available'.

    Why it's wrong here

    It is 'available'.

About these practice questions

Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.