ANS-C01 Network Management and Operations Practice Question
Network Topology
A network engineer ran the command shown in the exhibit to check VPC peering connections. Two peering connections are active. The engineer wants to verify that routes are correctly configured. What additional step is needed to ensure that instances in vpc-11111111 can communicate with instances in vpc-33333333?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a route in the route table of vpc-11111111 pointing to vpc-33333333 via the peering connection, and a route in vpc-33333311 pointing to vpc-11111111 via the same peering connection.
For VPC peering to enable communication between instances in different VPCs, route tables in each VPC must have routes pointing to the peering connection. Specifically, vpc-11111111 needs a route to the CIDR of vpc-33333333 via the peering connection, and vpc-33333333 needs a route to the CIDR of vpc-11111111 via the same peering connection. Option A is incorrect because security groups are stateful and allow return traffic, but they do not replace the need for routing. Option B is incorrect because DNS resolution is optional and not required for IP-based communication. Option D is incorrect because the peering connection is already active, as stated.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure security groups to allow traffic between the VPCs.
Why it's wrong here
Security groups are needed but routing is the primary issue.
- ✗
Enable DNS resolution for the peering connection.
Why it's wrong here
DNS resolution is optional.
- ✓
Add a route in the route table of vpc-11111111 pointing to vpc-33333333 via the peering connection, and a route in vpc-33333311 pointing to vpc-11111111 via the same peering connection.
Why this is correct
Routes are needed in both VPCs.
- ✗
Ensure that the peering connection is in the 'active' state.
Why it's wrong here
It is already active.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.