AmazonAmazon Advanced Networking Specialty ANS-C01 Certification·EN·Updated 3 Aug 2026
A company will deploy many SD-WAN sites and needs an SD-WAN hub appliance in a VPC attached to an existing transit gateway. The design must support at least 5 Gbps throughput from the hub appliance to other VPCs on the transit gateway. Which configuration meets this requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: Assign a new CIDR block to the transit gateway. Create a new VPC for the SD-WAN hub virtual appliance. Attach the new VPC to the transit gateway with a VPC attachment. Add a transit gateway Connect attachment. Create a Connect peer and specify the GRE and BGP parameters. Create a route in the appropriate VPC for the SD-WAN hub virtual appliance to route to the transit gateway..
Why this is the answer
The correct option leverages Transit Gateway Connect, which supports Generic Routing Encapsulation (GRE) tunnels and BGP for dynamic routing. This combination is designed for high-performance connectivity with third-party network virtual appliances, offering throughput up to 10 Gbps per Connect attachment, easily meeting the 5 Gbps requirement. Assigning a new CIDR to the Transit Gateway and creating a dedicated VPC for the appliance are standard best practices for network segmentation and routing.
The incorrect options involving IPsec VPN connections are limited to 1.25 Gbps per tunnel, making them unsuitable for the 5 Gbps throughput requirement. While multiple IPsec tunnels can be used, Connect provides a more scalable and performant solution. The option specifying VXLAN is incorrect because Transit Gateway Connect uses GRE for encapsulation, not VXLAN.