ANS-C01 Network Implementation Practice Question
Which TWO of the following are valid methods to connect multiple VPCs together in a hub-and-spoke topology while maintaining centralized control? (Choose two.)
⚠ Common exam trap
A common mix-up: candidates confuse VPC peering as inherently non-hub-and-spoke, but the question allows for a full mesh of peering connections with centralized route management, which technically satisfies the requirement, while Direct Connect and Gateway Endpoints are frequently misapplied as VPC-to-VPC connectivity solutions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Establish VPC peering connections in a full mesh and manage routes centrally.
VPC peering connections can be arranged in a full mesh, and by centrally managing route tables (e.g., using a centralized route management tool or a central VPC with route propagation), you can enforce a hub-and-spoke routing pattern. Option D is correct because AWS Transit Gateway inherently supports hub-and-spoke topologies by attaching multiple VPCs to a single gateway, which acts as the hub, and allows centralized control over routing and security policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a VPN connection between each VPC and a central VPN appliance.
Why it's wrong here
Complex and not scalable.
- ✓
Establish VPC peering connections in a full mesh and manage routes centrally.
Why this is correct
Possible but less scalable than Transit Gateway.
- ✗
Use Direct Connect to connect VPCs.
Why it's wrong here
Direct Connect is for on-premises.
- ✓
Use an AWS Transit Gateway with a central VPC as the hub.
Why this is correct
Native hub-and-spoke architecture.
- ✗
Use VPC Gateway Endpoints to connect VPCs.
Why it's wrong here
Endpoints are for AWS services.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.