ANS-C01 Network Management and Operations Practice Question
A network engineer is troubleshooting high latency on a VPN connection between an on-premises network and AWS. The VPN uses two tunnels to a virtual private gateway. The engineer notices that traffic is only using one tunnel, and the other tunnel is idle. What should the engineer do to ensure both tunnels are utilized?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create two separate site-to-site VPN connections to two different virtual private gateways and enable ECMP.
Creating two separate site-to-site VPN connections, each to a different virtual private gateway, and enabling ECMP (Equal Cost Multipath Routing) allows traffic to be load-balanced across both tunnels. AWS site-to-site VPN connections by default operate in active/passive mode, using only one tunnel at a time. To achieve active/active usage, you need multiple VPN connections with ECMP. Option B (BGP MED) is incorrect because MED influences path selection but cannot force both tunnels to be used simultaneously when the underlying VPN is active/passive. Option C (static routes with equal metrics) is incorrect because static routes do not enable ECMP for a single VPN connection; AWS still treats tunnels as active/passive. Option D (transit gateway with ECMP) is incorrect because while a transit gateway can use ECMP across multiple VPN connections, the original scenario describes a single VPN connection to a virtual private gateway, not a transit gateway.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create two separate site-to-site VPN connections to two different virtual private gateways and enable ECMP.
Why this is correct
Using ECMP across multiple VPN connections allows both tunnels to be used simultaneously.
- ✗
Configure BGP MED values to prefer the idle tunnel.
Why it's wrong here
MED influences path selection but does not enable active-active use; one path is still preferred.
- ✗
Configure static routes with equal metrics on both tunnels.
Why it's wrong here
Static routes do not load balance across tunnels; BGP is needed.
- ✗
Use a transit gateway with equal cost multipath routing.
Why it's wrong here
Transit gateway supports ECMP, but the issue is with a virtual private gateway, not transit gateway.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.