Courseiva
Network DesignmediumMultiple ChoiceObjective-mapped

ANS-C01 Network Design Practice Question

Network Topology
aws ec2 describe-vpn-connectionsvpn-connection-ids vpn-12345678Refer to the exhibit.```"VpnConnections": ["VpnConnectionId": "vpn-12345678","State": "available","CustomerGatewayConfiguration": "...","VpnGatewayId": "vgw-12345678","Category": "IPsec.1","Options": {"TunnelOptions": ["OutsideIpAddress": "203.0.113.1","TunnelInsideCidr": "169.254.10.0/30"},"OutsideIpAddress": "203.0.113.2","TunnelInsideCidr": "169.254.10.4/30""Routes": ["DestinationCidrBlock": "10.0.0.0/8","Source": "static","State": "available"

Refer to the exhibit. A VPN connection has two tunnels. Which statement is correct about this VPN configuration?

⚠ Common exam trap

AWS often tests the misconception that two tunnels in a VPN connection are for load balancing, but in AWS Site-to-Site VPN, they are strictly for high availability (active/standby or active/active with BGP), not for aggregating bandwidth.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The VPN provides high availability with two tunnels

The exhibit shows a VPN connection with two tunnels, which is the standard design for AWS Site-to-Site VPN to provide high availability. Each tunnel is on a separate device and path, so if one tunnel fails, traffic automatically fails over to the other tunnel. This ensures that the VPN connection remains operational even during maintenance or failure of a single tunnel.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The VPN uses BGP dynamic routing

    Why it's wrong here

    Routes are static, not BGP.

  • The VPN provides high availability with two tunnels

    Why this is correct

    Two tunnels provide redundancy.

  • The tunnel inside CIDRs are /24 networks

    Why it's wrong here

    They are /30 networks.

  • Both tunnels use the same inside CIDR

    Why it's wrong here

    Different inside CIDRs: 169.254.10.0/30 and 169.254.10.4/30.

About these practice questions

Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.