ANS-C01 Network Implementation Practice Question
A network engineer is troubleshooting connectivity issues between two VPCs connected via a Transit Gateway. The VPCs are in the same region and have proper route tables. Which TWO actions should the engineer perform to diagnose the problem?
⚠ Common exam trap
The ANS-C01 exam often tests the misconception that Transit Gateway has its own security groups or NACLs, leading candidates to incorrectly select options B or D, when in fact these constructs only exist at the VPC/subnet level.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the VPC route tables have routes pointing to the Transit Gateway attachment.
For traffic to flow from a VPC to a Transit Gateway, the VPC's route tables must include a route pointing to the Transit Gateway attachment (e.g., 10.0.0.0/16 -> tgw-xxx). Without this route, the VPC has no path to send traffic into the Transit Gateway, causing connectivity failure regardless of other configurations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Verify that the VPC route tables have routes pointing to the Transit Gateway attachment.
Why this is correct
Missing routes would prevent traffic from reaching the Transit Gateway.
- ✗
Check the security groups of the Transit Gateway.
Why it's wrong here
Transit Gateways do not have security groups.
- ✗
Ping the Transit Gateway to verify its status.
Why it's wrong here
Transit Gateways do not respond to ICMP ping.
- ✗
Examine the network ACLs for the Transit Gateway.
Why it's wrong here
Network ACLs are associated with subnets, not the Transit Gateway itself.
- ✓
Review VPC Flow Logs for the subnets to see if traffic is being blocked.
Why this is correct
Flow Logs can indicate if traffic is being dropped by security groups or NACLs.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.