The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
You are configuring a Global Accelerator. What happens if you change the endpoint group settings?
AAll traffic is stopped immediately.
BTraffic routing to old endpoints continues.
CNew settings apply only at peak hours.
DNew endpoints are tested and only applied.
Explanation
Traffic continues to the old endpoints until the new endpoint settings are finalized; others suggest instantaneous changes that are incorrect.
Q352
Which service allows you to efficiently manage API traffic?
AAmazon API Gateway
BAWS Lambda
CAWS Direct Connect
DAmazon S3
Explanation
Amazon API Gateway is designed for API traffic management, while others serve different purposes.
Q353
A company needs to implement hybrid networking with on-premises and AWS. Which feature should they use?
AAWS Direct Connect
BVPC Peering
CAWS VPN
DAWS Transit Gateway
Explanation
AWS Direct Connect provides dedicated connection for hybrid setups, whereas others facilitate only specific types of connectivity.
Q354
You are configuring security groups in AWS. What happens when you set allow rules only and no deny rules?
AAll traffic is allowed
BTraffic is denied by default
COutbound traffic is unrestricted
DInbound traffic is restricted
Explanation
Security groups allow all outbound traffic by default without explicit denies, but deny rules aren’t needed unless conflicting.
Q355
A company is using Amazon Route 53 for DNS management. What will happen if they mistakenly delete a hosted zone with active records?
AAll records are permanently lost.
BRecords are recoverable by AWS.
COnly public records are lost.
DPrivate records remain intact.
Explanation
All records in a deleted hosted zone are permanently lost as Route 53 does not support recovery.
Q356
Which AWS service enables you to automate network traffic routing via artificial intelligence?
AAmazon SageMaker
BAWS Transit Gateway
CAmazon Kinesis
DAWS Global Accelerator
Explanation
AWS Global Accelerator uses AI to optimize routing for improved availability and performance.
Q357
You are configuring an Amazon VPC peering connection between two VPCs. Which condition must be met for the peering to be successfully established within the same region?
AVPCs must have overlapping CIDR blocks.
BBoth VPCs must be from the same account.
CVPCs must reside in different AZs.
DVirtual Private Gateways must be used.
Explanation
Both VPCs can be in different accounts, but must have non-overlapping CIDR blocks and can reside in the same region or AZs.
Q358
Which service provides a scalable Domain Name System (DNS)?
AAmazon Route 53
BAWS Global Accelerator
CAWS Transit Gateway
DAmazon S3
Explanation
Amazon Route 53 is specifically designed for DNS tasks, while the others serve different purposes.
Q359
A company needs to connect its on-premises data center to AWS securely. What should they use?
AAWS Direct Connect
BAmazon CloudFront
CAmazon VPC Peering
DAWS Lambda
Explanation
AWS Direct Connect establishes a dedicated network connection for secure data transfer, unlike the other options.
Q360
What happens when an EC2 instance is stopped and started again?
AIt retains its private IP address.
BIt keeps its public IP address.
CIt loses all attached EBS volumes.
DIt may get a new public IP.
Explanation
Stopping and starting an EC2 instance can lead to a new public IP if the Elastic IP is not used, while it retains the private IP.