ANS-C01 Network Implementation Practice Question
Which TWO of the following are benefits of using an AWS Transit Gateway over VPC peering for connecting multiple VPCs? (Select TWO.)
⚠ Common exam trap
The ANS-C01 exam often tests the misconception that Transit Gateway provides lower costs or built-in encryption, when in fact the primary benefits are transitive routing and centralized management, not cost savings or automatic security features.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Transitive routing between all attached VPCs.
AWS Transit Gateway supports transitive routing, meaning that any VPC attached to the transit gateway can communicate with any other attached VPC through a single central hub. This eliminates the need to establish a full mesh of VPC peering connections, which would require n*(n-1)/2 individual peering links and manual route table entries for each pair. In contrast, VPC peering does not support transitive routing—if VPC A is peered with VPC B and VPC B is peered with VPC C, VPC A cannot route to VPC C through VPC B.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Lower data transfer costs between VPCs.
Why it's wrong here
Costs can be higher due to per-GB charges.
- ✗
Built-in internet gateway for all attached VPCs.
Why it's wrong here
Each VPC still needs its own internet gateway.
- ✗
Automatic encryption of traffic between VPCs.
Why it's wrong here
No automatic encryption; use VPN or other methods.
- ✓
Transitive routing between all attached VPCs.
Why this is correct
Hub-and-spoke model allows any-to-any connectivity.
- ✓
Centralised management of network policies and routing.
Why this is correct
Single point of control for multiple VPCs.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE of the following are benefits of using AWS Transit Gateway over VPC peering for inter-VPC connectivity? (Choose three.)
hard- ✓ A.Transitive routing between all attached VPCs
- B.Lower latency than VPC peering
- ✓ C.Support for connecting to on-premises networks via Direct Connect and VPN
- D.No additional cost compared to VPC peering
- ✓ E.Centralized management of network connections
Why A: AWS Transit Gateway enables transitive routing, meaning that traffic can flow between any attached VPCs without needing a full mesh of VPC peering connections. With VPC peering, each pair of VPCs requires a separate peering connection, and transitive routing is not supported — traffic cannot hop from one peered VPC to another. Transit Gateway acts as a hub-and-spoke router, simplifying connectivity and scaling to hundreds of VPCs.
Variation 2. Which TWO scenarios are best suited for using AWS Transit Gateway over VPC peering? (Select TWO.)
hard- A.Connecting VPCs in different AWS accounts
- B.Connecting a single VPC to an on-premises network
- ✓ C.Connecting hundreds of VPCs across multiple accounts
- ✓ D.Connecting VPCs to on-premises via Direct Connect
- E.Connecting two VPCs in the same account and region
Why C: AWS Transit Gateway is designed to act as a central hub for connecting multiple VPCs and on-premises networks, simplifying management and reducing the number of connections. Option C is correct because Transit Gateway can scale to connect hundreds of VPCs across multiple accounts using a hub-and-spoke model, whereas VPC peering would require a full mesh of point-to-point connections, which becomes unmanageable and hits the hard limit of 125 peering connections per VPC. Option D is correct because Transit Gateway natively integrates with AWS Direct Connect via a Direct Connect Gateway, allowing a single Transit Gateway to route traffic from multiple VPCs to on-premises without needing individual VPN tunnels or complex routing configurations.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.