ANS-C01 Network Implementation Practice Question
Which TWO scenarios are best suited for using AWS Transit Gateway over VPC peering? (Select TWO.)
⚠ Common exam trap
Watch out — candidates often assume VPC peering is always simpler for cross-account or on-premises connections, but the exam tests the scalability and management overhead differences, especially when the number of VPCs exceeds a handful or when transitive routing is required.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Connecting hundreds of VPCs across multiple accounts
AWS Transit Gateway is designed to act as a central hub for connecting multiple VPCs and on-premises networks, simplifying management and reducing the number of connections. Option C is correct because Transit Gateway can scale to connect hundreds of VPCs across multiple accounts using a hub-and-spoke model, whereas VPC peering would require a full mesh of point-to-point connections, which becomes unmanageable and hits the hard limit of 125 peering connections per VPC. Option D is correct because Transit Gateway natively integrates with AWS Direct Connect via a Direct Connect Gateway, allowing a single Transit Gateway to route traffic from multiple VPCs to on-premises without needing individual VPN tunnels or complex routing configurations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Connecting VPCs in different AWS accounts
Why it's wrong here
Both support cross-account.
- ✗
Connecting a single VPC to an on-premises network
Why it's wrong here
VPC peering is not needed; use VPN or Direct Connect.
- ✓
Connecting hundreds of VPCs across multiple accounts
Why this is correct
Transit Gateway simplifies hub-and-spoke topology.
- ✓
Connecting VPCs to on-premises via Direct Connect
Why this is correct
Transit Gateway integrates with Direct Connect Gateway.
- ✗
Connecting two VPCs in the same account and region
Why it's wrong here
For a single-account, single-region VPC-to-VPC connection, VPC peering provides direct, low-latency connectivity without a central intermediary, whereas Transit Gateway introduces an unnecessary hub-and-spoke topology that adds per-GB data processing costs and a single point of routing control. This option tempts because Transit Gateway excels at simplifying transitive routing across many VPCs or VPNs, but for just two VPCs the extra complexity and expense are unwarranted.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.