A company is migrating to AWS and will have three VPCs in the same region. They need to connect all three VPCs to their on-premises network through a single AWS Site-to-Site VPN. They want to minimize the number of VPN connections and simplify route management. Which architecture should they use?

Create a single VPN connection to a centralized VPC and use a NAT gateway to route traffic to the other VPCs.

Peer the three VPCs together and create a single VPN connection to one of the VPCs.

Create a separate Site-to-Site VPN connection from on-premises to each VPC.

Create a Transit Gateway and attach all three VPCs, then create a single Site-to-Site VPN attachment to the Transit Gateway.

AWSCertified Advanced Networking - Specialty

Domain 1Objective 5

Task 1.5: Design a Routing Strategy and Connectivity Architecture Between On-Premises Networks and the AWS Cloud ANS-C01 Practice Questions (Page 3)

Part of the Content Domain 1: Network Design domain, which accounts for 30% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~21–35 in this domain), expect 4–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

15concepts

30%of the exam

Questions 11–15

11application · medium
A company is migrating to AWS and will have three VPCs in the same region. They need to connect all three VPCs to their on-premises network through a single AWS Site-to-Site VPN. They want to minimize the number of VPN connections and simplify route management. Which architecture should they use?
Select an answer first
12foundation · easy
Which type of route is manually added to a route table to direct traffic to a specific destination?
Select an answer first
13foundation · easy
Which type of Direct Connect virtual interface is used to access AWS public services such as Amazon S3?
Select an answer first
14foundation · easy
Which AWS service provides metrics for monitoring the status of a Site-to-Site VPN connection?
Select an answer first
15foundation · easy
Which AWS component is used as the hub in a VPN CloudHub architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 1.5: Design a Routing Strategy and Connectivity Architecture Between On-Premises Networks and the AWS Cloud ANS-C01 Practice Questions (Page 3)

Questions 11–15

A company is migrating to AWS and will have three VPCs in the same region. They need to connect all three VPCs to their on-premises network through a single AWS Site-to-Site VPN. They want to minimize the number of VPN connections and simplify route management. Which architecture should they use?

Which type of route is manually added to a route table to direct traffic to a specific destination?

Which type of Direct Connect virtual interface is used to access AWS public services such as Amazon S3?

Which AWS service provides metrics for monitoring the status of a Site-to-Site VPN connection?

Which AWS component is used as the hub in a VPN CloudHub architecture?

Keep studying — Content Domain 1: Network Design