Amazon ANS-C01 Exam Questions Answers

Amazon ANS-C01 Study Questions for Exam 2026

Here you can get updated Amazon ANS-C01 AWS Certified Advanced Networking - Specialty Exam practice questions and answers in PDF and web-based practice test software. These AWS Certified Advanced Networking - Specialty Exam ANS-C01 practice questions are designed to help you study the exam topics and build confidence for your certification exam. The Amazon ANS-C01 study material will assist you in preparing for the latest Amazon Specialty certification exam with a large set of practice items in convenient Amazon ANS-C01 PDF files.

Prepare Effectively with Updated Amazon ANS-C01 Questions

You can showcase your skills in the information technology field with the Amazon Specialty certification (ANS-C01). Success in the ANS-C01 exam can strengthen your portfolio and help you pursue better job opportunities. CertsDrive provides Amazon certification ANS-C01 mock tests to support your preparation for the Amazon certification. Many IT professionals have prepared with these Amazon Specialty ANS-C01 practice questions. Practice exams and PDF questions are the main formats of our product. You can practice in an exam‑like AWS Certified Advanced Networking - Specialty Exam ANS-C01 environment with our desktop practice test software and web-based practice exam.

The Amazon Specialty ANS-C01 PDF format is ideal for preparing from any place via smartphones, laptops, and tablets. CertsDrive has been helping ANS-C01 exam applicants for many years with practice resources. You can strengthen and validate your skills for the Amazon certification ANS-C01 exam by using our practice tests and study questions. We also offer a refund policy if you are not satisfied with the AWS Certified Advanced Networking - Specialty Exam ANS-C01 preparation material.

AWS Certified Advanced Networking - Specialty Exam ANS-C01 Questions and Answers

CertsDrive is a preparation platform that offers Amazon ANS-C01 practice questions in PDF format for easier study and revision. You can try a free AWS Certified Advanced Networking - Specialty Exam ANS-C01 practice questions demo before purchasing the full product.

UNLOCK FULL
ANS-C01 Exam Features

In Just $35 You can Access

• All Official Question Types
• Interactive Web-Based Practice Test Software
• No Installation or 3rd Party Software Required
• Customize your practice sessions (Free Demo)
• 24/7 Customer Support

Get Full Access

Page: 1 / 20
Total Questions: 99

Questions & Answers PDF

• Question 1

  

  A company is developing an application in which IoT devices will report measurements to the AWS Cloud. The application will have millions of end users. The company observes that the IoT devices cannot support DNS resolution. The company needs to implement an Amazon EC2 Auto Scaling solution so that the IoT devices can connect to an application endpoint without using DNS.Which solution will meet these requirements MOST cost-effectively?

  • Use an Application Load Balancer (ALB)-type target group for a Network Load Balancer (NLB). Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the ALB. Set up the IoT devices to connect to the IP addresses of the NLB.
  • Use an AWS Global Accelerator with an Application Load Balancer (ALB) endpoint. Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the ALSet up the IoT devices to connect to the IP addresses of the accelerator.
  • Use a Network Load Balancer (NLB). Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the NLB. Set up the IoT devices to connect to the IP addresses of the NLB.
  • Use an AWS Global Accelerator with a Network Load Balancer (NLB) endpoint. Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the NLB. Set up the IoT devices to connect to the IP addresses of the accelerator.

  Reveal Answer Answer: D Next Question

• Question 2

  

  A network engineer needs to standardize a company's approach to centralizing and managing interface VPC endpoints for private communication with AWS services. The company uses AWS Transit Gateway for inter-VPC connectivity between AWS accounts through a hub-and-spoke model. The company's network services team must manage all Amazon Route 53 zones and interface endpoints within a shared services AWS account. The company wants to use this centralized model to provide AWS resources with access to AWS Key Management Service (AWS KMS) without sending traffic over the public internet.What should the network engineer do to meet these requirements?

  • In the shared services account, create an interface endpoint for AWS KMS. Modify the interface endpoint by disabling the private DNS name. Create a private hosted zone in the shared services account with an alias record that points to the interface endpoint. Associate the private hosted zone with the spoke VPCs in each AWS account.
  • In the shared services account, create an interface endpoint for AWS KMS. Modify the interface endpoint by disabling the private DNS name. Create a private hosted zone in each spoke AWS account with an alias record that points to the interface endpoint. Associate each private hosted zone with the shared services AWS account.
  • In each spoke AWS account, create an interface endpoint for AWS KMS. Modify each interface endpoint by disabling the private DNS name. Create a private hosted zone in each spoke AWS account with an alias record that points to each interface endpoint. Associate each private hosted zone with the shared services AWS account.
  • In each spoke AWS account, create an interface endpoint for AWS KMS. Modify each interface endpoint by disabling the private DNS name. Create a private hosted zone in the shared services account with an alias record that points to each interface endpoint. Associate the private hosted zone with the spoke VPCs in each AWS account.

  Reveal Answer Answer: A Next Question

• Question 3

  

  A data analytics company has a 100-node high performance computing (HPC) cluster. The HPC cluster is for parallel data processing and is hosted in a VPC in the AWS Cloud. As part of the data processing workflow, the HPC cluster needs to perform several DNS queries to resolve and connect to Amazon RDS databases, Amazon S3 buckets, and on-premises data stores that are accessible through AWS Direct Connect. The HPC cluster can increase in size by five to seven times during the company's peak event at the end of the year.The company is using two Amazon EC2 instances as primary DNS servers for the VPC. The EC2 instances are configured to forward queries to the default VPC resolver for Amazon Route 53 hosted domains and to the on-premises DNS servers for other on-premises hosted domain names. The company notices job failures and finds that DNS queries from the HPC cluster nodes failed when the nodes tried to resolve RDS and S3 bucket endpoints.Which architectural change should a network engineer implement to provide the DNS service in the MOST scalable way?

  • Scale out the DNS service by adding two additional EC2 instances in the VPC. Reconfigure half of the HPC cluster nodes to use these new DNS servers. Plan to scale out by adding additional EC2 instance-based DNS servers in the future as the HPC cluster size grows.
  • Scale up the existing EC2 instances that the company is using as DNS servers. Change the instance size to the largest possible instance size to accommodate the current DNS load and the anticipated load in the future.
  • Create Route 53 Resolver outbound endpoints. Create Route 53 Resolver rules to forward queries to on-premises DNS servers for on premises hosted domain names. Reconfigure the HPC cluster nodes to use the default VPC resolver instead of the EC2 instance-based DNS servers. Terminate the EC2 instances.
  • Create Route 53 Resolver inbound endpoints. Create rules on the on-premises DNS servers to forward queries to the default VPC resolver. Reconfigure the HPC cluster nodes to forward all DNS queries to the on-premises DNS servers. Terminate the EC2 instances.

  Reveal Answer Answer: C Next Question

• Question 4

  

  A company's network engineer is designing an active-passive connection to AWS from two on-premises data centers. The company has set up AWS Direct Connect connections between the on-premises data centers and AWS. From each location, the company is using a transit VIF that connects to a Direct Connect gateway that is associated with a transit gateway.The network engineer must ensure that traffic from AWS to the data centers is routed first to the primary data center. The traffic should be routed to the failover data center only in the case of an outage.Which solution will meet these requirements?

  • Set the BGP community tag for all prefixes from the primary data center to 7224:7100. Set the BGP community tag for all prefixes from the failover data center to 7224:7300
  • Set the BGP community tag for all prefixes from the primary data center to 7224:7300. Set the BGP community tag for all prefixes from the failover data center to 7224:7100
  • Set the BGP community tag for all prefixes from the primary data center to 7224:9300. Set the BGP community tag for all prefixes from the failover data center to 7224:9100
  • Set the BGP community tag for all prefixes from the primary data center to 7224:9100. Set the BGP community tag for all prefixes from the failover data center to 7224:9300

  Reveal Answer Answer: B Next Question

• Question 5

  

  A company is hosting an application on Amazon EC2 instances behind a Network Load Balancer (NLB). A solutions architect added EC2 instances in a second Availability Zone to improve the availability of the application. The solutions architect added the instances to the NLB target group.The company's operations team notices that traffic is being routed only to the instances in the first Availability Zone.What is the MOST operationally efficient solution to resolve this issue?

  • Enable the new Availability Zone on the NLB
  • Create a new NLB for the instances in the second Availability Zone
  • Enable proxy protocol on the NLB
  • Create a new target group with the instances in both Availability Zones

  Reveal Answer Answer: A Next Question

• Question 6

  

  A company has an AWS Site-to-Site VPN connection between its existing VPC and on-premises network. The default DHCP options set is associated with the VPC. The company has an application that is running on an Amazon Linux 2 Amazon EC2 instance in the VPC. The application must retrieve an Amazon RDS database secret that is stored in AWS Secrets Manager through a private VPC endpoint. An on-premises application provides internal RESTful API service that can be reached by URL (https://api.example.internal). Two on-premises Windows DNS servers provide internal DNS resolution.The application on the EC2 instance needs to call the internal API service that is deployed in the on-premises environment. When the application on the EC2 instance attempts to call the internal API service by referring to the hostname that is assigned to the service, the call fails. When a network engineer tests the API service call from the same EC2 instance by using the API service's IP address, the call is successful.What should the network engineer do to resolve this issue and prevent the same problem from affecting other resources in the VPC?

  • Create a new DHCP options set that specifies the on-premises Windows DNS servers. Associate the new DHCP options set with the existing VPC. Reboot the Amazon Linux 2 EC2 instance.
  • Create an Amazon Route 53 Resolver rule. Associate the rule with the VPC. Configure the rule to forward DNS queries to the on-premises Windows DNS servers if the domain name matches example.internal.
  • Modify the local host file in the Amazon Linux 2 EC2 instance in the VPMap the service domain name (api.example.internal) to the IP address of the internal API service.
  • Modify the local /etc/resolv.conf file in the Amazon Linux 2 EC2 instance in the VPC. Change the IP addresses of the name servers in the file to the IP addresses of the company's on-premises Windows DNS servers.

  Reveal Answer Answer: B Next Question

• Question 7

  

  A network engineer is designing the architecture for a healthcare company's workload that is moving to the AWS Cloud. All data to and from the on-premises environment must be encrypted in transit. All traffic also must be inspected in the cloud before the traffic is allowed to leave the cloud and travel to the on-premises environment or to the internet.The company will expose components of the workload to the internet so that patients can reserve appointments. The architecture must secure these components and protect them against DDoS attacks. The architecture also must provide protection against financial liability for services that scale out during a DDoS event.Which combination of steps should the network engineer take to meet all these requirements for the workload? (Choose three.)

  • Use Traffic Mirroring to copy all traffic to a fleet of traffic capture appliances.
  • Set up AWS WAF on all network components.
  • Configure an AWS Lambda function to create Deny rules in security groups to block malicious IP addresses.
  • Use AWS Direct Connect with MACsec support for connectivity to the cloud.
  • Use Gateway Load Balancers to insert third-party firewalls for inline traffic inspection.
  • Configure AWS Shield Advanced and ensure that it is configured on all public assets.

  Reveal Answer Answer: D, E, F Next Question

• Question 8

  

  You deploy an Amazon EC2 instance that runs a web server into a subnet in a VPC. An Internet gateway is attached, and the main route table has a default route (0.0.0.0/0) configured with a target of the Internet gateway.The instance has a security group configured to allow as follows:Protocol: TCPPort: 80 inbound, nothing outboundThe Network ACL for the subnet is configured to allow as follows:Protocol: TCPPort: 80 inbound, nothing outboundWhen you try to browse to the web server, you receive no response.Which additional step should you take to receive a successful response?

  • Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80
  • Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535
  • Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 80
  • Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 1024-65535

  Reveal Answer Answer: D Next Question

• Question 9

  

  A company is deploying a non-web application on an AWS load balancer. All targets are servers located on-premises that can be accessed by using AWS Direct Connect. The company wants to ensure that the source IP addresses of clients connecting to the application are passed all the way to the end server.How can this requirement be achieved?

  • Use a Network Load Balancer to automatically preserve the source IP address.
  • Use a Network Load Balancer and enable the X-Forwarded-For attribute.
  • Use a Network Load Balancer and enable the ProxyProtocol v2 attribute.
  • Use an Application Load Balancer to automatically preserve the source IP address in the X-Forwarded-For header.

  Reveal Answer Answer: C Next Question

• Question 10

  

  A company uses a hybrid architecture and has an AWS Direct Connect connection between its on-premises data center and AWS. The company has production applications that run in the on-premises data center. The company also has production applications that run in a VPC. The applications that run in the on-premises data center need to communicate with the applications that run in the VPC. The company is using corp.example.com as the domain name for the on-premises resources and is using an Amazon Route 53 private hosted zone for aws.example.com to host the VPC resources.The company is using an open-source recursive DNS resolver in a VPC subnet and is using a DNS resolver in the on-premises data center. The company's on-premises DNS resolver has a forwarder that directs requests for the aws.example.com domain name to the DNS resolver in the VPC. The DNS resolver in the VPC has a forwarder that directs requests for the corp.example.com domain name to the DNS resolver in the on-premises data center. The company has deckled to replace the open-source recursive DNS resolver with Amazon Route 53 Resolver endpoints.Which combination of steps should a network engineer take to make this replacement? (Choose three.)

  • Create a Route 53 Resolver rule to forward aws.example.com domain queries to the IP addresses of the outbound endpoint.
  • Configure the on-premises DNS resolver to forward aws.example.com domain queries to the IP addresses of the inbound endpoint.
  • Create a Route 53 Resolver inbound endpoint and a Route 53 Resolver outbound endpoint.
  • Create a Route 53 Resolver rule to forward aws.example.com domain queries to the IP addresses of the inbound endpoint.
  • Create a Route 53 Resolver rule to forward corp.example.com domain queries to the IP address of the on-premises DNS resolver.
  • Configure the on-premises DNS resolver to forward aws.example.com queries to the IP addresses of the outbound endpoint.

  Reveal Answer Answer: B, C, E Next Question

Page: 1 / 20
Total Questions: 99

Previous Page Next Page