Important Amazon ANS-C01 Exam Questions

CertPrep • Amazon • ANS-C01 Exam Questions

Select Certification Providers

Select Certification Exam

Get Full Version

Amazon AWS Certified Advanced Networking - Specialty ANS-C01 Exam

Attempt the Amazon Specialty practice test and solve real exam-like ANS-C01 questions to prepare efficiently and increase your chances of success. Our Amazon ANS-C01 practice questions match the actual AWS Certified Advanced Networking - Specialty exam format, helping you enhance confidence and improve performance. With our ANS-C01 practice exam software, you can analyze your performance, identify weak areas, and work on them effectively to boost your final Amazon Specialty exam score.

Vendor:	Amazon
Exam Name:	AWS Certified Advanced Networking - Specialty
Registration Code:	ANS-C01
Related Certification:	Amazon Specialty Certification
Exam Audience:	AWS networking specialist,

Total Questions

291

Last Updated

22-06-2026

Exam Duration

170 MINUTES

Upgrade to Premium

GET FULL PDF

Question: 1

A company has deployed a web application on AWS. The web application uses an Application Load Balancer (ALB) across multiple Availability Zones. The targets of the ALB are AWS Lambda functions. The web application also uses Amazon CloudWatch metrics for monitoring.

Users report that parts of the web application are not loading properly. A network engineer needs to troubleshoot the problem. The network engineer enables access logging for the ALB.

What should the network engineer do next to determine which errors the ALB is receiving?

ASend the logs to Amazon CloudWatch Logs. Review the ALB logs in CloudWatch Insights to determine which error messages the ALB is receiving.

BConfigure the Amazon S3 bucket destination. Use Amazon Athena to determine which error messages the ALB is receiving.

CConfigure the Amazon S3 bucket destination. After Amazon CloudWatch Logs pulls the ALB logs from the S3 bucket automatically, review the logs in CloudWatch Logs to determine which error messages the ALB is receiving.

DSend the logs to Amazon CloudWatch Logs. Use the Amazon Athena CloudWatch Connector to determine which error messages the ALB is receiving.

Answer: B

Explanation:

Access logs is an optional feature of Elastic Load Balancing that is disabled by default. After you enable access logs for your load balancer, Elastic Load Balancing captures the logs and stores them in the Amazon S3 bucket that you specify as compressed files. You can disable access logs at any time. https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html

Question: 2

A company has a VPC in the AWS Cloud. The company recently acquired a competitor that also has a VPC in the AWS Cloud. A network engineer discovers an IP address overlap between the two VPCs. Both VPCs require access to an AWS Marketplace partner service.

Which solution will ensure interoperability among the VPC hosted services and the AWS Marketplace partner service?

AConfigure VPC peering with static routing between the VPCs. Configure an AWS Site-to-Site VPN connection with static routing to the partner service.

BConfigure a NAT gateway in the VPCs. Configure default routes in each VPC to point to the local NAT gateway. Attach each NAT gateway to a transit gateway. Configure an AWS Site-to-Site VPN connection with static routing to the partner service.

CConfigure AWS PrivateLink to facilitate connectivity between the VPCs and the partner service. Use the DNS name that is created with the associated interface endpoints to route traffic between the VPCs and the partner service.

DConfigure a NAT instance in the VPCs. Configure default routes in each VPC to point to the local NAT instance. Configure an interface endpoint in each VPC to connect to the partner service. Use the DNS name that is created with the associated interface endpoints to route traffic between the VPCs and the partner service.

Answer: C

Question: 3

A global company is designing a hybrid architecture to privately access AWS resources in the us-west-2 Region. The company's existing architecture includes a VPC that uses RFC 1918 IP address space. The VPC is connected to an on-premises data center over AWS Direct Connect Amazon Route 53 provides name resolution within the VPC. Locally managed DNS servers in the data center provide DNS services to the on-premises hosts.

The company has applications in the data center that need to download objects from an Amazon S3 bucket in us-west-2.

Which solution can the company use to access Amazon S3 without using the public IP address space?

ACreate an S3 interface endpoint in the VPC. Update the on-premises application configuration to use the Regional VPC endpoint DNS hostname that is mapped to the S3 interface endpoint.

BCreate an S3 interface endpoint in the VPC. Configure a Route 53 Resolver inbound endpoint in the VPC. Set up the data center DNS servers to forward DNS queries for the S3 domain from on premises to the inbound endpoint.

CCreate an S3 gateway endpoint in the VPC. Update the on-premises application configuration to use the hostname that is mapped to the S3 gateway endpoint.

DCreate an S3 gateway endpoint in the VPC. Configure a Route 53 Resolver inbound endpoint in the VPC. Set up the data center DNS servers to forward DNS queries for the S3 domain from on premises to the inbound endpoint.

Answer: C

Question: 4

Your company runs an application for the US market in the us-east-1 AWS region. This application uses proprietary TCP and UDP protocols on Amazon Elastic Compute Cloud (EC2) instances. End users run a real-time, front-end application on their local PCs. This front-end application knows the DNS hostname of the service.

You must prepare the system for global expansion. The end users must access the application with lowest latency.

How should you use AWS services to meet these requirements?

ARegister the IP addresses of the service hosts as ''A'' records with latency-based routing policy in Amazon Route 53, and set a Route 53 health check for these hosts.

BSet the Elastic Load Balancing (ELB) load balancer in front of the hosts of the service, and register the ELB name of the main service host as an ALIAS record with a latency-based routing policy in Route 53.

CSet Amazon CloudFront in front of the host of the service, and register the CloudFront name of the main service as an ALIAS record in Route 53.

DSet the Amazon API gateway in front of the service, and register the API gateway name of the main service as an ALIAS record in Route 53.

Answer: B

Question: 5

A company needs to capture and log traffic for Nitro-based Amazon EC2 instances to comply with regulations. The company's network team has prepared a solution that enables VPC traffic mirroring and sends traffic to a second set of EC2 instances in an Auto Scaling group.

The network team has added a Network Load Balancer (NLB) in front of the EC2 instances the traffic will be sent to. However, the solution does not send any mirrored traffic to the EC2 instances that are behind the NLB.

How should the network team configure traffic mirroring to use the NLB endpoint?

ASelect the NLB as a source for traffic mirroring. Use a UDP listener.

BSelect the NLB as a target for traffic mirroring. Use a TCP listener and a UDP listener.

CSelect the NLB as a target for traffic mirroring. Use a TCP listener.

DSelect the NLB as a target for traffic mirroring. Use a UDP listener.

Answer: D

Explanation:

Traffic Mirroring with UDP: VPC traffic mirroring sends mirrored traffic as UDP packets encapsulated in VXLAN (Virtual eXtensible Local Area Network). Therefore, the target for traffic mirroring must have a UDP listener to accept the mirrored traffic.

NLB as a Target: The Network Load Balancer (NLB) can be configured as the target for traffic mirroring. By setting up a UDP listener on the NLB, it can properly receive the VXLAN-encapsulated mirrored traffic and forward it to the EC2 instances behind it.

Correct Listener Protocol: Since mirrored traffic uses UDP, setting up a TCP listener or using both TCP and UDP listeners will not work. Only a UDP listener can correctly handle the traffic.

SAVE TIME & QUICKLY PREPARE WITH REAL QUESTIONS

GET FULL ACCESS

Other Amazon Certification Exams

SAP-C02 Exam

AWS Certified Solutions Architect - Professional Exam

Amazon-DEA-C01 Exam

AWS Certified Data Engineer - Associate

DVA-C02 Exam

AWS Certified Developer - Associate

SOA-C03 Exam

AWS Certified CloudOps Engineer - Associate

SAA-C03 Exam

AWS Certified Solutions Architect - Associate

AIP-C01 Exam

AWS Certified Generative AI Developer - Professional