nerdexam
Amazon

ANS-C01 · Question #125

A company's network engineer is configuring an AWS Site-to-Site VPN connection between a transit gateway and the company's on-premises network. The Site-to-Site VPN connection is configured to use…

The correct answer is C. Configure the virtual tunnel interfaces on the customer gateway to allow asymmetric routing. Note: With an Active/Active configuration, the customer gateway must have Asymmetric routing activated on the virtual tunnel interfaces. https://repost.aws/knowledge-center/vpn-configure-tunnel-preference

Submitted by luis.pe· Mar 6, 2026

Question

A company's network engineer is configuring an AWS Site-to-Site VPN connection between a transit gateway and the company's on-premises network. The Site-to-Site VPN connection is configured to use BGP over two tunnels in active/active mode with equal-cost multi-path (ECMP) routing activated on the transit gateway. When the network engineer attempts to send traffic from the on-premises network to an Amazon EC2 instance, traffic is sent over the first tunnel. However, return traffic is received over the second tunnel and is dropped at the customer gateway. The network engineer must resolve this issue without reducing the overall VPN bandwidth. Which solution will meet these requirements?

Options

  • AConfigure the customer gateway to use AS PATH prepending and local preference to prefer one
  • BConfigure the Site-to-Site VPN options to set the first tunnel as the primary tunnel to eliminate
  • CConfigure the virtual tunnel interfaces on the customer gateway to allow asymmetric routing.
  • DConfigure the Site-to-Site VPN to use static routing in active/active mode to ensure that traffic

How the community answered

(40 responses)
  • A
    18% (7)
  • B
    5% (2)
  • C
    68% (27)
  • D
    10% (4)

Explanation

Note: With an Active/Active configuration, the customer gateway must have Asymmetric routing activated on the virtual tunnel interfaces. https://repost.aws/knowledge-center/vpn-configure-tunnel-preference

Topics

#AWS Site-to-Site VPN#Transit Gateway#BGP routing#Asymmetric routing

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice