To secure communications between your on-premises data center and AWS, you want to use a VPN that provides a consistent 1.25 Gbps throughput per tunnel. If you need higher total throughput (e.g., 5 Gbps), how should you configure your Transit Gateway and VPN?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Enable Equal-Cost Multi-Path (ECMP) on the Transit Gateway and establish multiple VPN tunnels

By using ECMP and multiple VPN tunnels to a Transit Gateway, you can load-balance traffic and achieve much higher aggregate bandwidth for your hybrid connectivity....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

To secure communications between your on-premises data center and AWS, you want to use a VPN that provides a consistent 1.25 Gbps throughput per tunnel. If you need higher total throughput (e.g., 5 Gbps), how should you configure your Transit Gateway and VPN?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

Enable Equal-Cost Multi-Path (ECMP) on the Transit Gateway and establish multiple VPN tunnels

Why This Answer Is Correct

By using ECMP and multiple VPN tunnels to a Transit Gateway, you can load-balance traffic and achieve much higher aggregate bandwidth for your hybrid connectivity.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.