The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
Which service allows you to create and manage private networks in AWS?
AAmazon VPC
BAWS Direct Connect
CAmazon Route 53
DAWS CloudFormation
Explanation
Amazon VPC is specifically designed for creating private networks, while others serve different purposes.
Q182
A company needs to control access to its AWS resources with specific permissions. Which service should they use?
AAWS Lambda
BAmazon EC2
CAWS IAM
DAmazon S3
Explanation
AWS IAM manages permissions and access controls to AWS resources, unlike the other services mentioned.
Q183
What happens when an AWS Security Group is applied to an EC2 instance?
ARestricts outbound traffic only
BAllows all inbound traffic only
CFilters inbound and outbound traffic
DDisables instance networking
Explanation
Security Groups filter both inbound and outbound traffic, while the other options do not accurately describe their function.
Q184
Which service can detect network anomalies in AWS?
AAmazon GuardDuty
BAWS Config
CAmazon Inspector
DAWS CloudTrail
Explanation
Amazon GuardDuty is designed for threat detection, while the others focus on compliance, security assessment, or logging activities.
Q185
A company needs to route traffic between multiple AWS accounts. What is the best solution?
AVPC Peering
BAWS Transit Gateway
CVPN Connection
DAWS Direct Connect
Explanation
AWS Transit Gateway is optimal for interconnecting multiple VPCs across accounts, while others do not manage multiple account routing efficiently.
Q186
You are configuring a security group for an EC2 instance. What happens when you do not specify any inbound rules?
AAll inbound traffic is allowed.
BNo inbound traffic is allowed.
CTraffic is allowed by default.
DOnly HTTPS traffic is allowed.
Explanation
By default, security groups deny all inbound traffic unless explicitly allowed, making other options incorrect.
Q187
Which service provides automated scaling of resources based on demand?
AAWS Auto Scaling
BAmazon RDS
CAWS Lambda
DAmazon S3
Explanation
AWS Auto Scaling adjusts resource capacity based on demand, unlike others which have different functions.
Q188
A company needs to securely connect its on-premises data center to AWS. Which option should they choose?
AVPN Connection
BAWS Direct Connect
CAWS Storage Gateway
DAWS CloudTrail
Explanation
AWS Direct Connect provides a dedicated network connection, ideal for secure communications, while VPN is less efficient for large data transfers.
Q189
What happens when an EC2 instance is terminated in a placement group?
AAll instances in group terminate
BPlacement group is deleted
CNew instance cannot join immediately
DThe group remains functional
Explanation
When an instance is terminated in a placement group, any new instance launched must wait before joining, unlike other options that are incorrect.
Q190
Which service provides scalable DNS and domain name management?
AAmazon Route 53
BAWS Lambda
CAmazon RDS
DAmazon SNS
Explanation
Amazon Route 53 is specifically designed for DNS management; the other services do not perform this function.