Match each VPN term to its correct description in the context of AWS Site-to-Site VPN.
Drag a concept onto its matching description — or click a concept then click the description.
VPN concentrator on the AWS side attached to a VPC
VPN device on the on-premises side
Encrypted IPsec connection between VGW and CGW
Secret key used to authenticate the VPN tunnel endpoints
Dynamic routing protocol used to exchange routes over VPN tunnels
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
VPN Connection: A logical connection between a VPC and an on-premises network.
The correct matches are: VPN Connection → logical connection, VPN Tunnel → encrypted tunnel, Transit Gateway → central hub. Common confusions involve swapping the definitions of Virtual Private Gateway (AWS-side) and Customer Gateway (customer-side).
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
VPN Connection: A logical connection between a VPC and an on-premises network.
Why this is correct
This is the correct definition of a VPN Connection in AWS Site-to-Site VPN.
Virtual Private Gateway: The device on the customer side of the VPN connection.
Why it's wrong here
Incorrect — this describes a Customer Gateway (CGW), not a Virtual Private Gateway (VGW).
Customer Gateway: The VPN concentrator on the AWS side.
Why it's wrong here
Incorrect — this describes a Virtual Private Gateway (VGW), not a Customer Gateway (CGW).
VPN Tunnel: An encrypted IPsec tunnel between the VGW and the CGW.
Why this is correct
This is the correct definition of a VPN Tunnel in AWS Site-to-Site VPN.
Transit Gateway: A central hub that can interconnect multiple VPCs and on-premises networks via VPN.
Why this is correct
This is the correct definition of a Transit Gateway in the context of VPN connectivity.
Go deeper
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.