The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
What happens when you exceed the limit of elastic IP addresses per AWS account?
ANo effect, usage continues normally
BOnly existing IPs remain usable
CNew requests are denied
DOld IPs are released automatically
Explanation
Requests for new Elastic IPs will be denied once the limit is reached, preventing further allocation.
Q112
Which service allows you to extend a VPC across multiple AWS regions?
AAWS Global Accelerator
BAWS Transit Gateway
CAmazon Route 53
DAWS Direct Connect
Explanation
AWS Transit Gateway can connect multiple VPCs across regions, while the others do not provide this specific feature.
Q113
A company needs to send alerts when a specific CloudWatch metric exceeds a threshold. What should they use?
AAWS CloudTrail
BAWS Lambda
CCloudWatch Alarms
DAWS Config
Explanation
CloudWatch Alarms can directly monitor metrics and send alerts based on defined thresholds, which is not the focus of the other options.
Q114
You are configuring a multi-Region application and are concerned about latency. What strategy should you implement for optimal performance?
AUse a single EC2 instance
BImplement an AWS Global Accelerator
CDeploy to a single region
DUse S3 only for static files
Explanation
AWS Global Accelerator helps in directing user traffic to the optimal endpoint, thereby reducing latency, unlike the other choices which do not address latency issues effectively.
Q115
Which service allows automatic scaling of resources based on demand?
AAmazon EC2 Auto Scaling
BAmazon Route 53
CAWS Lambda
DAmazon RDS
Explanation
Amazon EC2 Auto Scaling adjusts capacity automatically; the others serve different purposes.
Q116
A company needs to connect its on-premises network to AWS using a VPN. What should they implement?
ADirect Connect
BAWS Site-to-Site VPN
CVPC Peering
DAWS Transit Gateway
Explanation
AWS Site-to-Site VPN establishes a secure connection; the others do not provide VPN capabilities.
Q117
What happens when you configure an NACL rule with a higher priority than an existing allow rule?
AIt overrides the existing allow rule
BIt is ignored
CIt logs traffic only
DIt requires manual override
Explanation
NACL rules are evaluated based on priority, so a higher priority can override other rules; the others do not accurately describe the behavior.
Q118
Which service is used for managing network traffic based on rules?
A company needs to securely share data between AWS accounts without using the public internet. What should they use?
AVPN Connection
BVPC Peering Connections
CAWS Transit Gateway
DDirect Connect
Explanation
AWS Transit Gateway enables secure, scalable traffic between accounts and VPCs, unlike the other options which have limitations.
Q120
What happens when a route target for a subnet is removed in a VPC?
ATraffic continues as normal
BAll connections are reset
CSubnetwork becomes unavailable
DNew routes are auto-generated
Explanation
Removing a route target makes the subnet unable to reach its intended destinations, unlike the other options that suggest uninterrupted service.