ANS-C01 Network Design Practice Question
Exhibit
Refer to the exhibit. The following is an excerpt from a VPC route table: Destination | Target 10.0.0.0/16 | local 0.0.0.0/0 | igw-1234567890abcdef0 172.31.0.0/16 | vgw-1234567890abcdef0
Based on the route table, which of the following is true?
⚠ Common exam trap
Watch out — candidates often confuse a virtual private gateway (used for VPN/Direct Connect) with a Transit Gateway, or assume that any route to a non-local CIDR implies a Transit Gateway, when in fact the route target (vgw vs. tgw) is the key differentiator.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The subnet has a VPN connection to a network with CIDR 172.31.0.0/16
The route table includes a route for destination 172.31.0.0/16 pointing to a virtual private gateway (vgw-xxxx), which is used for a VPN connection. This indicates that the subnet associated with this route table has a VPN connection to a network with CIDR 172.31.0.0/16, as the route directs traffic for that CIDR to the VPN gateway.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The route table is the main route table for the VPC
Why it's wrong here
There is no indication that it is the main route table; it could be a custom route table.
- ✗
The subnet is connected to a Transit Gateway
Why it's wrong here
The target is vgw-..., which is a Virtual Private Gateway, not Transit Gateway.
- ✓
The subnet has a VPN connection to a network with CIDR 172.31.0.0/16
Why this is correct
The route to vgw for 172.31.0.0/16 indicates a VPN connection.
- ✗
The subnet is a private subnet with no internet access
Why it's wrong here
There is a default route to an Internet Gateway, so the subnet has internet access.
Visual reference
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.