Your company has a hybrid cloud environment with a 10 Gbps Direct Connect. They want to ensure that if the Direct Connect link fails, traffic automatically fails over to a backup Site-to-Site VPN link without any manual reconfiguration. Which networking component and configuration is required?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Transit Gateway with BGP-based dynamic routing and appropriate AS Path prepending

Transit Gateway simplifies the integration of DX and VPN. Using BGP ensures that if the DX goes down, the routing table is updated to use the VPN path automatically....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

Your company has a hybrid cloud environment with a 10 Gbps Direct Connect. They want to ensure that if the Direct Connect link fails, traffic automatically fails over to a backup Site-to-Site VPN link without any manual reconfiguration. Which networking component and configuration is required?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

AWS Transit Gateway with BGP-based dynamic routing and appropriate AS Path prepending

Why This Answer Is Correct

Transit Gateway simplifies the integration of DX and VPN. Using BGP ensures that if the DX goes down, the routing table is updated to use the VPN path automatically.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.