Amazon AWS
AWS Certified Advanced Networking – Specialty
ANS-C01
The AWS Certified Advanced Networking – Specialty (ANS-C01) exam validates your skills in designing and implementing AWS networking solutions. It is suitable for networking professionals looking to specialize in AWS.
Questions 71–80 of 468
A company needs to connect multiple VPCs securely. What is the best AWS solution?
A
NAT Gateway
B
VPC Peering
C
AWS Lambda
D
EC2 Instances
VPC Peering allows secure communication between VPCs, while the others do not provide direct connectivity.
What happens when a VPN connection drops in a HA architecture?
A
Traffic automatically rerouted to another tunnel
B
VPN connection will reconnect automatically
C
All traffic is blocked until resolved
D
No effect on existing connections
In HA setups, traffic reroutes to maintain continuity, while the other options do not accurately reflect the behavior during a drop.
Which AWS service provides a managed DNS service?
A
Route 53
B
CloudFront
C
Elastic Load Balancing
D
VPC
Route 53 is designed for managing DNS, whereas others serve different purposes.
A company needs to connect their on-premises data center to AWS securely. Which service should they use?
A
AWS Direct Connect
B
AWS VPN
C
AWS Transit Gateway
D
Amazon VPC
AWS Direct Connect provides a dedicated network connection, whereas VPN is over the internet.
What happens when you delete a security group that is associated with an EC2 instance?
A
Instances are terminated automatically.
B
Instances lose network connectivity.
C
Instances remain but are unprotected.
D
Instances are unaffected.
Instances remain but without the deleted group's rules, thus could become unprotected.
Which service is used for managing AWS resources efficiently?
A
AWS CloudFormation
B
AWS Lambda
C
AWS EC2
D
AWS S3
AWS CloudFormation automates resource management, while others do not manage resources directly.
A company needs to securely manage access to AWS resources for their employees. What should they implement?
A
IAM roles
B
AWS Direct Connect
C
AWS VPN
D
S3 bucket policies
IAM roles provide secure access management, unlike other options which provide connectivity or storage policies.
You are configuring route tables for a VPC. What happens when a route has a destination of 0.0.0.0/0?
A
Data is sent to the Internet
B
Data is sent to local instances
C
Data is blocked entirely
D
Data routes to other VPCs
A 0.0.0.0/0 route directs traffic to the Internet Gateway.
Which service can help with DDoS attack prevention?
A
AWS Shield
B
AWS Lambda
C
Amazon RDS
D
AWS S3
AWS Shield is specifically designed for DDoS protection; the others serve different functions.
A company needs to connect its on-premises network securely to AWS. Which option should they choose?
A
AWS Direct Connect
B
AWS CloudFront
C
AWS Route 53
D
AWS Lambda
AWS Direct Connect provides a secure connection; others do not meet this requirement.