Amazon AWS
AWS Certified Advanced Networking – Specialty
ANS-C01
The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
Questions 1–10 of 468
Which service allows for private connectivity to AWS without using the internet?
A
Direct Connect
B
VPN Connection
C
CloudFront
D
Route 53
Direct Connect provides dedicated network connections; others don't ensure private connectivity.
A company needs to connect multiple VPCs across regions. What is the most efficient approach?
A
VPC Peering
B
AWS Transit Gateway
C
Site-to-Site VPN
D
Direct Connect
AWS Transit Gateway enables efficient inter-VPC and region connectivity; others are less scalable.
When configuring a security group, which action is NOT permitted?
A
Allow inbound traffic
B
Allow outbound traffic
C
Deny specific IP address
D
Allow traffic on all ports
Security groups can only allow traffic, not deny specific sources; others are valid configurations.
Which AWS service is primarily used for routing network traffic?
A
Amazon Route 53
B
AWS Lambda
C
Amazon S3
D
AWS IAM
Amazon Route 53 manages DNS services and handles routing.
A company needs to connect its on-premises data center to AWS securely. Which service should they use?
A
AWS Direct Connect
B
Amazon VPC
C
AWS VPN
D
Elastic Load Balancing
AWS Direct Connect provides a dedicated network connection for higher security.
What happens when you mistakenly terminate an EC2 instance that is running an application?
A
The application data is lost.
B
The application restarts automatically.
C
Billing continues until you detach storage.
D
The application can be recovered from S3.
When you terminate an EC2 instance, any data not persisted elsewhere is lost.
Which routing policy allows traffic to be split among multiple resources?
A
Geolocation Routing
B
Weighted Routing
C
Latency-based Routing
D
Failover Routing
Weighted Routing enables traffic distribution based on assigned weights, unlike the others which focus on specific criteria.
A company needs to isolate its VPC from all other VPCs in AWS. What should they enable?
A
VPC Peering
B
VPC Flow Logs
C
VPC Endpoint Services
D
No Peering Connections
By avoiding peering connections, the VPC remains isolated from others.
What happens when a NAT Gateway fails?
A
Traffic rerouted automatically
B
Instances lose Internet access
C
No impact on instances
D
EC2 instances shut down
Instances in private subnets will lose Internet access if the NAT Gateway fails.
Which service provides AWS Direct Connect integration?
A
AWS Transit Gateway
B
AWS CloudFront
C
Amazon VPC Peering
D
AWS Systems Manager
AWS Transit Gateway is designed for Direct Connect integration; others do not serve this purpose.