The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
A company needs to analyze large streams of data from IoT devices in real time. Which service should they use?
AAmazon RDS
BAmazon Kinesis
CAWS Lambda
DAmazon S3
Explanation
Amazon Kinesis is ideal for real-time IoT data analytics.
Q282
You are configuring a VPN connection between a VPC and an on-premises data center. What happens if the on-premises customer gateway fails?
ATraffic is automatically rerouted.
BThe VPN connection fails.
CAll data is lost.
DLatency is reduced instantly.
Explanation
If the customer gateway fails, the VPN fabric is interrupted, causing the connection to fall.
Q283
Which service provides reliable, low-latency connections between regions?
AAWS Direct Connect
BAmazon VPC
CAmazon CloudFront
DAWS Global Accelerator
Explanation
AWS Global Accelerator optimizes network paths for low latency, while others do not optimize inter-region latency.
Q284
A company needs to implement a VPN connection to secure communications. What should they use?
AAWS Direct Connect
BAmazon S3
CAWS Site-to-Site VPN
DElastic Load Balancing
Explanation
AWS Site-to-Site VPN specifically creates the secure tunnels for VPN connections, unlike others.
Q285
You are configuring a Network ACL in a VPC. What happens when you deny all inbound traffic?
AOnly HTTP traffic will be allowed
BNo traffic will be allowed
COutbound traffic is also denied
DOnly allowed IPs are granted access
Explanation
Denying all inbound traffic blocks all connections to that resource regardless of type.
Q286
Which AWS service allows you to automate network traffic routing decisions?
AAWS App Mesh
BAWS Direct Connect
CAWS VPC Peering
DAWS CloudFormation
Explanation
AWS App Mesh provides traffic control and allows intelligent routing, while the others are not focused on traffic automation.
Q287
A company needs to ensure low latency for a global application. What should they configure?
ARegional VPCs
BGlobal Accelerator
CElastic Load Balancer
DS3 Transfer Acceleration
Explanation
Global Accelerator optimizes routes for global applications, while the other options don't address low latency globally.
Q288
You are configuring security groups for an EC2 instance. What happens if you allow all outbound traffic?
AOnly specific outbound traffic is allowed.
BAll outbound traffic is denied.
CAll outbound traffic is allowed.
DIt causes a firewall error.
Explanation
Allowing all outbound traffic means that there are no restrictions, while the other options misstate how security groups operate.
Q289
Which service provides automatic scaling for applications?
AAWS Lambda
BAmazon EC2 Auto Scaling
CAmazon S3
DAWS CloudFormation
Explanation
Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances; AWS Lambda is for serverless computing, S3 is storage, and CloudFormation is for infrastructure as code.
Q290
A company needs to connect their on-premises network to AWS with a secure connection. What solution is best?
AAWS Direct Connect
BAWS Transit Gateway
CAWS VPN
DVPC Peering
Explanation
AWS Direct Connect provides a dedicated secure connection; Transit Gateway is for multi-VPC connections, VPN is for encrypted internet connections, and VPC Peering is for VPC interconnections.