Direct Connect Private VIF Requirements: VLAN and BGP Configuration
Which TWO of the following are requirements for establishing an AWS Direct Connect private virtual interface? (Choose two.)
Quick Answer
The answer is a unique VLAN ID and a BGP session. These two requirements are fundamental because the private virtual interface (VIF) operates as a Layer 2 Ethernet connection that must be isolated from other traffic on the same Direct Connect link, so a VLAN ID that is unique within the connection ensures proper segmentation, while BGP is mandatory for exchanging routes between your on-premises router and AWS, as Direct Connect does not support static routing for private VIFs. On the AWS Certified Advanced Networking Specialty ANS-C01 exam, this question tests your understanding of the core prerequisites for establishing a private VIF, often appearing as a trap where candidates mistakenly think a public ASN is required—but private ASNs are perfectly acceptable. Another common pitfall is confusing private VIFs with public VIFs, which are used for AWS public services. Remember the memory tip: "Private needs a unique VLAN and BGP, not a public ASN."
⚠ Common exam trap
The ANS-C01 exam often tests the misconception that a public BGP ASN is mandatory for all Direct Connect virtual interfaces, but private VIFs can use private ASNs (from the 64512–65535 range) without issue.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A BGP session between the customer router and the AWS device.
A BGP session between the customer router and the AWS device is a fundamental requirement for establishing a private virtual interface. The private VIF uses BGP to exchange routing information (typically a /30 or /31 subnet) between the on-premises network and the VPC, enabling dynamic route advertisement and failover. Without this BGP session, the VIF cannot be activated or used for traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Jumbo frames support (MTU 9001).
Why it's wrong here
Jumbo frames are supported but not required.
- ✗
A public IP address for the VIF.
Why it's wrong here
Private VIF uses private IPs; public VIF uses public IPs.
- ✗
A public BGP ASN.
Why it's wrong here
You can use private ASN (64512-65534) for private VIF.
- ✓
A BGP session between the customer router and the AWS device.
Why this is correct
BGP is used to exchange routes.
- ✓
A VLAN ID that is unique within the Direct Connect connection.
Why this is correct
VLAN tagging is used to separate virtual interfaces.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are required to establish a BGP session over a Direct Connect private virtual interface? (Choose TWO.)
hard- ✓ A.A VLAN ID
- B.A public IP address for the BGP peer
- C.A Direct Connect gateway
- ✓ D.BGP session with a customer router and AWS router
- E.A VPN connection to the VPC
Why A: A VLAN ID is required because a Direct Connect private virtual interface operates over a single 802.1Q VLAN trunk. The VLAN ID uniquely identifies the virtual interface on the Direct Connect connection, allowing multiple virtual interfaces to share the same physical link. Without a VLAN ID, the Layer 2 encapsulation cannot be established, and the BGP session cannot form.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.