Hub-and-Spoke VPC Connectivity
Which TWO options are valid methods to connect multiple VPCs together in a hub-and-spoke topology? (Select TWO.)
Quick Answer
The correct answers are VPC peering and AWS Transit Gateway, as both provide valid methods to connect multiple VPCs in a hub-and-spoke topology. VPC peering establishes a direct, one-to-one network connection between two VPCs using the AWS global backbone, enabling private IPv4 or IPv6 communication without needing gateways or VPNs, though it requires a full mesh of peering connections for multiple spokes. AWS Transit Gateway acts as a central hub that connects many VPCs and on-premises networks through a single, scalable gateway, dramatically simplifying management by replacing complex peering meshes with a star configuration. On the AWS Certified Advanced Networking Specialty ANS-C01 exam, this question tests your understanding of scalable multi-VPC architectures and the trade-offs between direct peering and centralized routing. A common trap is assuming that only Transit Gateway works for hub-and-spoke, but VPC peering is also valid for smaller, simpler topologies. Memory tip: think of Transit Gateway as the “hub” that scales, while VPC peering is the “spoke-to-spoke” shortcut for direct, low-latency links.
⚠ Common exam trap
AWS often tests the misconception that AWS Direct Connect or Site-to-Site VPN can directly interconnect multiple VPCs, but these are designed for on-premises connectivity, not VPC-to-VPC peering or transit routing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC peering
VPC peering (A) is a valid method because it establishes a direct, one-to-one network connection between two VPCs using the AWS global backbone, enabling private IPv4 or IPv6 communication without gateways or VPNs. AWS Transit Gateway (E) is valid because it acts as a central hub that connects multiple VPCs and on-premises networks through a single, scalable gateway, simplifying the hub-and-spoke topology management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VPC peering
Why this is correct
Can be used to create hub-and-spoke.
- ✗
AWS Direct Connect
Why it's wrong here
For on-premises.
- ✗
VPC Endpoints
Why it's wrong here
For service access.
- ✗
AWS Site-to-Site VPN
Why it's wrong here
For on-premises.
- ✓
AWS Transit Gateway
Why this is correct
Native hub-and-spoke.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are valid methods to connect multiple VPCs in the same AWS region? (Select TWO.)
medium- ✓ A.VPC peering
- B.AWS Direct Connect
- C.VPC endpoints
- D.Site-to-Site VPN
- ✓ E.Transit gateway
Why A: VPC peering (Option A) is a valid method to connect multiple VPCs in the same AWS region. It uses the AWS global network infrastructure to create a one-to-one, private IPv4 or IPv6 routing connection between two VPCs, allowing traffic to flow as if they were on the same network. This is a direct, non-transitive connection that does not require a separate transit hub.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.