ANS-C01 Network Design Practice Question
Which THREE are benefits of using AWS Transit Gateway over VPC peering in a multi-VPC environment? (Select THREE.)
⚠ Common exam trap
AWS often tests the misconception that Transit Gateway always reduces cost or complexity compared to VPC peering, but the trap here is that for small numbers of VPCs (e.g., 2-3), VPC peering is simpler and cheaper, while Transit Gateway's benefits (centralized management, transitive routing, hybrid connectivity) only become advantageous at scale.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Centralized management of network policies
AWS Transit Gateway offers a hub-and-spoke architecture that provides three key benefits over VPC peering: (1) the ability to attach VPN connections and Direct Connect virtual interfaces, enabling hybrid connectivity; (2) centralized management of network policies such as routing, security, and access controls from a single point; and (3) transitive routing between all attached VPCs, eliminating the need for full mesh peering.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Centralized management of network policies
Why this is correct
Correct. Centralized management allows consistent policy enforcement across multiple VPCs.
- ✗
Higher bandwidth per connection
Why it's wrong here
Incorrect. Bandwidth per connection is not inherently higher with Transit Gateway; VPC peering can also achieve high bandwidth.
- ✗
Simpler configuration for a few VPCs
Why it's wrong here
While Transit Gateway reduces configuration overhead in large-scale topologies, the question asks for benefits over VPC peering. For a *few* VPCs, VPC peering requires fewer steps—simply creating a direct route between two VPCs—whereas Transit Gateway introduces a central hub that must be created, attached, and have route tables propagated. The option is tempting because Transit Gateway does simplify management when the number of VPCs grows beyond a handful, but for a small number, the added orchestration of a hub-and-spoke model is unnecessary overhead.
- ✗
Lower cost compared to VPC peering
Why it's wrong here
Incorrect. Transit Gateway has hourly and per-GB charges that can make it more expensive than VPC peering for small deployments.
- ✓
Transitive routing between all attached VPCs
Why this is correct
Correct. Transitive routing allows any VPC attached to the Transit Gateway to communicate with any other attached VPC.
- ✓
Ability to attach VPN and Direct Connect connections
Why this is correct
Supports hybrid connectivity.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.