Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Question

Exhibit

Options

• A4
• B5
• C3
• D1

• A
  66% (38)
• B
  7% (4)
• C
  22% (13)
• D
  5% (3)

Explanation

Option A (4) is correct because the virtual private gateway (VGW) advertises the individual subnet CIDRs associated with the VPC over the BGP session on the Direct Connect link - and the diagram shows exactly 4 such prefixes being propagated. By default, a VGW advertises each subnet route it knows about, not a single summarized VPC CIDR.

Why the distractors fail:

• B (5) is a trap - one of the visible routes in the diagram (often a peered VPC prefix or a default route) is not re-advertised by the VGW over Direct Connect, making 5 an overcount.
• C (3) is an undercount - test-takers commonly miss a subnet that appears in a less prominent part of the diagram.
• D (1) reflects a misconception that the VGW summarizes everything into a single VPC CIDR block; it doesn't do that unless route summarization is explicitly configured.

Memory tip: Think "VGW advertises what it knows, not what it owns" - it propagates each learned subnet prefix individually over BGP, so count the distinct subnet CIDRs in the diagram, not just the VPC block.

No community discussion yet for this question.