Question 837 of 1,621
AWS Transit Gateway — Multi-Region On-Premises Connectivity
An organization needs to securely connect its on-premises data center to multiple VPCs in different AWS Regions. The on-premises network uses BGP. Which AWS service should be used to simplify routing and provide a single point of attachment for the on-premises router?
Quick Answer
The answer is AWS Transit Gateway with inter-Region peering attachments. This service acts as a central hub that simplifies routing by providing a single point of attachment for your on-premises router, which uses BGP to advertise routes into the Transit Gateway, while inter-Region peering extends that connectivity across multiple AWS Regions without requiring complex VPC peering meshes. On the AWS Certified Advanced Networking Specialty ANS-C01 exam, this scenario tests your understanding of hub-and-spoke architectures versus point-to-point solutions; a common trap is choosing VPC peering for multi-region needs, but remember that VPC peering is non-transitive and lacks a central routing point, whereas Transit Gateway natively supports transitive routing and BGP. Memory tip: think “Transit Gateway = the global router hub” — it’s the only service that combines multi-VPC, multi-region, and on-premises BGP into one managed attachment.
⚠ Common exam trap
Watch out — candidates often confuse Direct Connect gateway with Transit Gateway, assuming a Direct Connect gateway can natively handle inter-Region routing, but it requires additional VPN or Transit Gateway attachments to achieve multi-Region connectivity, whereas Transit Gateway with peering attachments is the designed solution for this exact use case.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Transit Gateway with inter-Region peering attachments.
AWS Transit Gateway with inter-Region peering attachments is the correct choice because it provides a single point of attachment for the on-premises router, simplifying routing and connectivity to multiple VPCs across different AWS Regions. The Transit Gateway supports BGP over VPN connections or Direct Connect, allowing the on-premises network to peer with a single Transit Gateway, which then centrally manages inter-VPC and inter-Region traffic through peering attachments, eliminating the need for multiple separate connections.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Direct Connect gateway with a private VIF.
Why it's wrong here
Single region only.
- ✓
AWS Transit Gateway with inter-Region peering attachments.
Why this is correct
Centralized hub with BGP and multi-region support.
- ✗
VPC Peering connections between each VPC and the on-premises network.
Why it's wrong here
Does not scale; requires multiple connections.
- ✗
AWS Client VPN endpoint.
Why it's wrong here
Not for site-to-site connectivity.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company wants to securely connect their on-premises data center to AWS using a site-to-site VPN. They have multiple branch offices that also need to connect to AWS. Which AWS service should they use to simplify the management of multiple VPN connections?
easy- A.VPC Peering
- B.AWS Direct Connect
- ✓ C.AWS Transit Gateway
- D.VPN CloudHub
Why C: AWS Transit Gateway (C) acts as a central hub that interconnects VPCs and on-premises networks, allowing you to manage multiple site-to-site VPN connections and branch office attachments through a single gateway. This simplifies routing and reduces operational overhead compared to managing individual VPN connections between each branch and each VPC.
Last reviewed: Jul 4, 2026
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.