DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free AWS ANS-C01 Exam Questions & Sample Practice Test

 Exam Name AWS Certified Advanced Networking - Specialty (Advanced Networking Specialty)
Exam NumberANS-C01
Exam Price$300 USD
Exam Duration170 minutes
Number of Questions65
Passing Score(750 / 1000 Approx.)

Before you embark on your AWS ANS-C01 certification journey, questions about the test format, the types of questions you'll face, their difficulty level, and the time required to complete the exam can be daunting. Fret not, these AWS Certified Advanced Networking - Specialty (ANS-C01) sample questions and demo exam can be your guiding light in dispelling these doubts and preparing you to face the challenge head-on.

The surefire route to conquering the AWS ANS-C01 exam lies in the continuous enhancement of your knowledge. To assess your learning and pinpoint areas that require improvement while familiarizing yourself with the actual exam format, we strongly recommend that you practice with our Premium AWS ANS-C01 Certification Practice Exam. This practice test stands as a cornerstone in your preparation strategy for the AWS Certified Advanced Networking - Specialty (ANS-C01) exam, aiding you in identifying your strengths and weaknesses, honing your time management skills, and giving you a realistic glimpse of the score you can anticipate achieving.

Take other online exams
Question #1
A company has deployed an application in a VPC that uses a NAT gateway for outbound traffic to the internet. A network engineer notices a large quantity of suspicious network traffic that is traveling from the VPC over the internet to IP addresses that are included on a deny list. The network engineer must implement a solution to determine which AWS resources are generating the suspicious traffic. The solution must minimize cost and administrative overhead. Which solution will meet these requirements?
A. aunch an Amazon EC2 instance in the VPC
B. se VPC flow logs
C. se VPC flow logs
D. onfigure the VPC to stream the network traffic directly to an Amazon Kinesis data stream
View answer
Correct Answer: C
Question #2
An international company provides early warning about tsunamis. The company plans to use IoT devices to monitor sea waves around the world. The data that is collected by the IoT devices must reach the company's infrastructure on AWS as quickly as possible. The company is using three operation centers around the world. Each operation center is connected to AWS through its own AWS Direct Connect connection. Each operation center is connected to the internet through at least two upstream internet service providers. The company has its own provider-independent (Pl) address space. The loT devices use TCP protocols for reliable transmission of the data they collect. The loT devices have both landline and mobile internet connectivity. The infrastructure and the solution will be deployed in multiple AWS Regions. The company will use Amazon Route 53 for DNS services. A network engineer needs to design connectivity between the loT devices and the services that run in the AWS Cloud. Which solution will meet these requirements with the HIGHEST availability?
A. et up an Amazon CloudFront distribution with origin failover
B. et up Route 53 latency-based routing
C. et up an accelerator in AWS Global Accelerator
D. et up Bring Your Own IP (BYOIP) addresses
View answer
Correct Answer: C
Question #3
A company has deployed a software-defined WAN (SD-WAN) solution to interconnect all if its offices. The company is migrating workloads to AWS and needs to extend its SD-WAN solution to support connectivity to these workloads. A network engineer plans to deploy AWS Transit Gateway Connect and two SD-WAN virtual appliances to provide this connectivity According to company policies, only a single SD-WAN virtual appliance can handle traffic from AWS workloads at a given time. How should the network engineer configure routing to meet these requirements?
A. dd a static default route in the transit gateway route table to point to the secondary SD-WAN virtual appliance
B. onfigure the BGP community tag 7224:7300 on the primary SD-WAN virtual appliance for BGP routes toward the transit gateway
C. onfigure the AS_PATH prepend attribute on the secondary SD-WAN virtual appliance for BGP routes toward the transit gateway
D. isable equal-cost multi-path (ECMP) routing on the transit gateway for Transit Gateway Connect
View answer
Correct Answer: C
Question #4
A network engineer needs to standardize a company's approach to centralizing and managing interface VPC endpoints for private communication with AWS services. The company uses AWS Transit Gateway for inter-VPC connectivity between AWS accounts through a hub-and-spoke model. The company's network services team must manage all Amazon Route 53 zones and interface endpoints within a shared services AWS account. The company wants to use this centralized model to provide AWS resources with access to AWS Key Management Service (AWS KMS) without sending traffic over the public internet. What should the network engineer do to meet these requirements?
A. n the shared services account, create an interface endpoint for AWS KMS
B. n each spoke AWS account, create an interface endpoint for AWS KMS
C. n each spoke AWS account, create an interface endpoint for AWS KMS
D. n each spoke AWS account, create an interface endpoint for AWS KMS
View answer
Correct Answer: A
Question #5
A company is migrating an application from on premises to AWS. The company will host the application on AmazonEC2 instances that are deployed in a single VPC. During the migration period, DNS queries from the EC2 instances must be able to resolve names of on-premises servers. The migration is expected to take 3 months. After the 3-month migration period, the resolution of on-premises servers will no longer be needed. What should a network engineer do to meet these requirements with the LEAST amount of configuration?
A. et up an AWS Site-to-Site VPN connection between on premises and AWS
B. et up an AWS Direct Connect connection with a private VIF
C. et up an AWS Client VPN connection between on premises and AWS
D. et up an AWS Direct Connect connection with a public VIF
View answer
Correct Answer: A
Question #6
A company is planning to use Amazon S3 to archive financial data. The data is currently stored in an on- premises data center. The company uses AWS Direct Connect with a Direct Connect gateway and a transit gateway to connect to the on-premises data center. The data cannot be transported over the public internet and must be encrypted in transit. Which solution will meet these requirements?
A. reate a Direct Connect public VIF
B. reate an IPsec VPN connection over the transit VIF
C. reate a VPC and attach the VPC to the transit gateway
D. reate a Direct Connect public VIF
View answer
Correct Answer: B
Question #7
A company has three VPCs in a single AWS Region. Each VPC contains 15Amazon EC2 instances, and no connectivity exists between the VPCs. The company is deploying a new application across all three VPCs. The application requires high bandwidth between the nodes. A network engineer must implement connectivity between the VPCs. Which solution will meet these requirements with the HIGHEST throughput?
A. onfigure a transit gateway
B. onfigure VPC peering between the three VPCs
C. onfigure a transit VPC
D. onfigure AWS Site-to-Site VPN connections between each VPC
View answer
Correct Answer: A
Question #8
A company is deploying a new stateless web application on AWS. The web application will run on Amazon EC2 instances in private subnets behind an Application Load Balancer. The EC2 instances are in an Auto Scaling group. The web application has a stateful management application for administration that will run on EC2 instances that are in a separate Auto Scaling group. The company wants to access the management application by using the same URL as the web application, with a path prefix of / management. The protocol, hostname, and port number must be the same for the web application and the management application. Access to the management application must be restricted to the company’s on-premises IP address space. An SSL/TLS certificate from Aws Certificate Manager (ACM) will protect the web application. Which combination of steps should a network engineer take to meet these requirements? (Select TWO.)
A. nsert a rule for the load balancer HTTPS listener
B. odify the default rule for the load balancer HTTPS listener
C. nsert a rule for the load balancer HTTPS listener
D. odify the default rule for the load balancer HTTPS listener
E. orward all requests to the web application target group
View answer
Correct Answer: AC
Question #9
A company is planning to create a service that requires encryption in transit. The traffic must not be decrypted between the client and the backend of the service. The company will implement the service by using the gRPC protocol over TCP port 443. The service will scale up to thousands of simultaneous connections. The backend of the service will be hosted on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster with the Kubernetes Cluster Autoscaler and the Horizontal Pod Autoscaler configured. The company needs to use mutual TLS for two-way authentication between the client and the backend. Which solution will meet these requirements?
A. nstall the AWS Load Balancer Controller for Kubernetes
B. nstall the AWS Load Balancer Controller for Kubernetes
C. reate a target group
D. reate a target group
View answer
Correct Answer: D
Question #10
A real estate company is building an internal application so that real estate agents can upload photos and videos of various properties. The application will store these photos and videos in an Amazon S3 bucket as objects and will use Amazon DynamoDB to store corresponding metadata. The S3 bucket will be configured to publish all PUT events for new object uploads to an Amazon Simple Queue Service (Amazon SQs) queue. A compute cluster of Amazon EC2 instances will poll the SQs queue to find out about newly uploaded objects. The cluster ill retrieve new objects perform proprietary image and video recognition and classification, update metadata in DynamoDB, and replace the objects with new watermarked objects. The company does not want public IP addresses on the EC2 instances. Which networking design solution will meet these requirements MOST cost-effectively as application usage increases?
A. lace the EC2 instances in a public subnet
B. lace the EC2 instances in a private subnet Create a NAT gateway in a public subnet in the same Availability Zone
C. lace the EC2 instances in a private subnet
D. lace the EC2 instances in a private subnet
View answer
Correct Answer: C

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.