ANS-C01 Network Management and Operations Practice Question
A network engineer is troubleshooting connectivity between two VPCs that are peered. The VPC peering connection is active, and the route tables have appropriate routes. However, instances in VPC A cannot reach instances in VPC B. The security groups in both VPCs allow all traffic. What is the most likely issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The route tables in both VPCs do not have routes pointing to the peering connection for the other VPC's CIDR
The most likely issue is that the route tables in both VPCs do not have routes pointing to the VPC peering connection for the other VPC's CIDR. Although the VPC peering connection is active, without explicit routes in the route tables, traffic cannot be directed to the peer VPC. Since security groups allow all traffic, they are not the cause. Different availability zones do not affect VPC peering. Therefore, the correct answer is B.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The security groups are not allowing ICMP traffic
Why it's wrong here
Security groups allow all traffic per the problem.
- ✓
The route tables in both VPCs do not have routes pointing to the peering connection for the other VPC's CIDR
Why this is correct
Without these routes, traffic cannot traverse the peering connection.
- ✗
The VPC peering connection is not in the 'active' state
Why it's wrong here
The problem states it is active.
- ✗
The instances are in different availability zones
Why it's wrong here
Availability zones do not affect VPC peering connectivity.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.