Question 192 of 247
SOA-C02 Networking and Content Delivery Practice Question
A company has two Amazon VPCs (VPC-A and VPC-B) in the same AWS Region with non-overlapping CIDR blocks. The SysOps administrator needs to establish private IP connectivity between the two VPCs with high throughput and minimal cost. Which solution should the administrator implement?
⚠ Common exam trap
The trap here is that candidates often over-engineer the solution by choosing AWS Transit Gateway for its centralized routing features, forgetting that for a simple two-VPC peering scenario with non-overlapping CIDRs, VPC Peering is the most cost-effective and high-performance option without the overhead of a transit hub.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC Peering
VPC Peering is the correct solution because it allows direct private IP connectivity between two VPCs in the same AWS Region using the AWS global network backbone, with no bandwidth bottlenecks, no single point of failure, and no additional cost beyond data transfer charges. Since the VPCs have non-overlapping CIDR blocks, they can be peered without route conflicts, and traffic flows entirely within AWS without traversing the public internet or requiring a transit hub.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VPC Peering
Why this is correct
VPC peering allows private connectivity between two VPCs using AWS's private network. It is simple to set up, has no bandwidth limitations, and incurs no hourly cost. It is the most cost-effective solution for connecting two VPCs in the same region.
- ✗
AWS Transit Gateway
Why it's wrong here
AWS Transit Gateway operates as a regional hub-and-spoke router that can interconnect numerous VPCs, VPNs, and Direct Connect attachments using a central route table. For a scenario with only two VPCs, deploying a transit gateway requires you to create the gateway, attach each VPC, and configure transit gateway route tables and VPC route propagation, adding operational overhead without benefit. Furthermore, Transit Gateway bills per attachment-hour and per-gigabyte of processed data, whereas VPC peering has no hourly component and only charges for data transfer, making it a more economical and simpler choice for connecting exactly two VPCs.
- ✗
AWS VPN CloudHub
Why it's wrong here
AWS VPN CloudHub is a hub-and-spoke VPN architecture built around a virtual private gateway that lets multiple on-premises locations communicate over IPsec tunnels using dynamic BGP routing. It is expressly designed for connecting remote branch offices to AWS and to each other, not for connecting VPCs within the same region, so you would have to run VPN endpoints in each VPC or use a virtual private gateway, which complicates routing. VPC peering, by contrast, uses the AWS internal network with no customer gateway devices, VPN termination, or BGP configuration, making it the native and far simpler VPC-to-VPC solution.
- ✗
AWS Direct Connect
Why it's wrong here
AWS Direct Connect establishes a dedicated, private physical link between your on-premises data center and an AWS Direct Connect location, requiring cross-connects, routers, and Layer 2/Layer 3 configurations. It is a connectivity service for hybrid cloud access to AWS, not a mechanism for linking two VPCs together, and to use it for VPC-to-VPC traffic you would still need a transit gateway or virtual private gateway plus separate VIFs, which adds significant complexity. With substantial one-time setup fees for the dedicated connection, recurring port-hour charges, and weeks of lead time, it is drastically over-engineered and cost-prohibitive compared to a simple same-region VPC peering connection.
Visual reference
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.