SAP-C02 Practice Question: Accelerate Workload Migration and Modernization
A company is migrating its on-premises application to AWS and needs to maintain the same private IP addresses for the application servers. The on-premises network uses 10.0.0.0/16. Which AWS service allows the company to extend its on-premises network to AWS and preserve IP addresses?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Site-to-Site VPN
WS Site-to-Site VPN (Option C). This service creates an encrypted connection between the on-premises network and the VPC, allowing the company to extend its on-premises IP address range (10.0.0.0/16) into AWS, thereby preserving the private IP addresses for application servers. AWS Transit Gateway (Option A) is a hub that connects multiple VPCs and on-premises networks but requires VPN or Direct Connect attachments; it does not directly provide IP preservation. VPC Peering (Option B) connects VPCs within AWS, not on-premises networks. AWS Direct Connect (Option D) provides a dedicated private connection but does not inherently preserve IP addresses; it can be used with VPN to achieve IP preservation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Transit Gateway
Why it's wrong here
AWS Transit Gateway is a network transit hub that connects VPCs and on-premises networks. While it can be used with VPN attachments, it does not directly extend IP addresses; the VPN component is needed for that.
- ✗
VPC Peering
Why it's wrong here
VPC Peering connects two VPCs in the same or different accounts/regions. It does not extend an on-premises network to AWS.
- ✓
AWS Site-to-Site VPN
Why this is correct
AWS Site-to-Site VPN creates a secure tunnel between the on-premises network and the VPC, enabling the use of the same private IP addresses in the VPC.
- ✗
AWS Direct Connect
Why it's wrong here
AWS Direct Connect provides a dedicated private connection but does not inherently preserve IP addresses; it typically requires a VPN or BGP configuration to extend addressing.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.