The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
A company needs to connect on-premises data center to AWS. What should they use?
AAWS Direct Connect
BAmazon VPC Peering
CAWS Transit Gateway
DElastic Load Balancer
Explanation
AWS Direct Connect provides a dedicated network connection from on-premises to AWS; the others do not connect on-premises networks directly.
Q192
What happens when an EC2 instance is in a stopped state?
AInstance uses no costs
BInstance retains IP address
CInstance data is lost
DInstance cannot be restarted
Explanation
The stopped instance incurs no charges, but it can still retain IP addresses depending on settings; other options misrepresent instance behavior.
Q193
You are configuring a VPC. What is the minimum number of subnets required for a VPC with two availability zones?
A2 subnets
B1 subnet
C4 subnets
D3 subnets
Explanation
You need at least one subnet in each availability zone, totaling to two.
Q194
A company needs to ensure that data in S3 is not publicly accessible. Which S3 feature can they use?
AS3 Block Public Access
BS3 Lifecycle Policies
CS3 Cross-Region Replication
DS3 Versioning
Explanation
S3 Block Public Access settings prevent public access to S3 buckets and objects.
Q195
What happens when a NAT Gateway goes down in a public subnet without redundancy?
ATraffic is not routed out
BAll traffic is blocked
CInstance access remains unaffected
DInstances gain public IPs automatically
Explanation
Without a functioning NAT Gateway, instances in private subnets cannot access the internet.
Q196
Which AWS service allows for automation of network configuration across multiple accounts?
AAWS CloudFormation
BAWS Config
CAWS Systems Manager
DAWS Transit Gateway
Explanation
AWS Systems Manager allows for automation across accounts whereas the others focus on different aspects of management or provisioning.
Q197
A company needs to securely connect its on-premises data center to its AWS Virtual Private Cloud. Which service should they use?
AAWS Direct Connect
BAWS VPN
CAWS PrivateLink
DAWS CloudFront
Explanation
AWS Direct Connect provides a dedicated network connection, ideal for high-throughput scenarios, unlike VPN which offers encrypted connections over the internet.
Q198
You are configuring an Amazon EC2 instance within a VPC. What happens when you assign a public IP address to the instance?
AIt cannot communicate with the internet
BIt gets a static IP from Amazon
CIt uses the public subnet's NAT gateway
DIt can send and receive internet traffic
Explanation
Assigning a public IP allows the instance to directly communicate over the internet, which is correct; the other options do not accurately describe this behavior.
Q199
Which service provides a scalable domain name service in AWS?
AAmazon Route 53
BAmazon API Gateway
CAWS IAM
DAWS Lambda
Explanation
Amazon Route 53 is the DNS service, while others serve different purposes.
Q200
A company needs to securely connect its on-premises network to AWS. What is the best option?
AAWS Direct Connect
BAWS VPN Gateway
CAmazon API Gateway
DAWS Transit Gateway
Explanation
AWS Direct Connect offers a dedicated connection, unlike the other options.