ANS-C01 AWS Certified Advanced Networking – Specialty Free Practice Questions and Answers

A company needs a private, consistent network connection from its data center to AWS. It also requires encryption for traffic crossing the connection. Which design meets both needs?

• A. Use AWS Direct Connect and establish an IPsec VPN over the connection
• B. Use only an internet gateway and public subnets
• C. Use a NAT gateway as the encrypted tunnel endpoint
• D. Use Amazon CloudFront with an origin access identity

Resources in an AWS VPC must resolve private DNS names hosted by the company’s on-premises DNS servers. On-premises clients must also resolve private hosted zone names in AWS. What should the network team configure?

• A. Route 53 Resolver inbound and outbound endpoints with appropriate forwarding rules
• B. Public hosted zones for every internal record
• C. Static entries on each EC2 instance only
• D. CloudFront distributions for the DNS zones

Several VPCs connect to a Transit Gateway. A shared services VPC must be reachable from application VPCs, but two application environments must remain isolated. What is the best approach?

• A. Use separate Transit Gateway route tables and associate or propagate attachments according to required reachability
• B. Propagate every attachment to one route table and add no controls
• C. Attach all VPCs to the same subnet
• D. Replace the Transit Gateway with a NAT gateway

Multiple VPCs need private access to a centrally operated application without exposing it to the internet or allowing broad network-level connectivity to the provider VPC. Which service fits this pattern?

• A. AWS PrivateLink using an endpoint service and interface endpoints
• B. An internet-facing Application Load Balancer
• C. A public S3 website endpoint
• D. A NAT instance with source/destination checks enabled

A critical hybrid workload uses two Direct Connect connections terminating at the same customer router and the same AWS location. The business requires protection against a facility-level failure. Which improvement is most important?

• A. Use redundant connections in separate Direct Connect locations and verify diverse customer-side paths
• B. Increase the MTU on the existing connection only
• C. Add more private IP addresses to the VPC
• D. Route both connections through the same single router and facility