Match each AWS service to its primary use case.
Drag a concept onto its matching description — or click a concept then click the description.
Centrally manage multiple AWS accounts
Connect VPCs and on-premises networks
Dedicated private network connection to AWS
Secure connection over the internet to AWS
Privately access services across VPCs
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
AWS Organizations: Centrally manage multiple AWS accounts and consolidate billing
Correct matches: AWS Organizations for account management, AWS Direct Connect for dedicated private connection, AWS VPN for encrypted internet connection, AWS Transit Gateway for hub-and-spoke network interconnection. Common confusions include swapping Direct Connect and VPN, or misattributing account management to networking services.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
AWS Organizations: Centrally manage multiple AWS accounts and consolidate billing
Why this is correct
AWS Organizations allows you to centrally govern your environment as you grow and scale your AWS resources. When you create an organization, AWS Organizations automatically creates a root, which is the parent container for all the accounts in your organization.
AWS Direct Connect: Dedicated private network connection from on-premises to AWS
Why this is correct
AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your on-premises data center to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment.
AWS VPN: Secure encrypted connection over the public internet to AWS
Why this is correct
AWS VPN provides a secure and managed VPN connection over the public internet to your Amazon VPC. It consists of two services: AWS Site-to-Site VPN and AWS Client VPN.
AWS Transit Gateway: Central hub for interconnecting VPCs and on-premises networks
Why this is correct
AWS Transit Gateway is a network transit hub that you can use to interconnect your virtual private clouds (VPCs) and on-premises networks. As your cloud infrastructure scales globally, Transit Gateway enables you to manage inter-region peering, VPN connections, and Direct Connect gateways.
AWS Organizations: Dedicated private network connection from on-premises to AWS
Why it's wrong here
Incorrect: This describes AWS Direct Connect, not AWS Organizations. AWS Organizations is for account management, not network connectivity.
AWS Direct Connect: Secure encrypted connection over the public internet to AWS
Why it's wrong here
Incorrect: This describes AWS VPN, not AWS Direct Connect. AWS Direct Connect is a dedicated private connection, not over the public internet.
Go deeper
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.