Amazon Web ServicesExpert levelANS-C01

ANS-C01 exam dumps: 512 free AWS Advanced Networking Specialty practice questions

Free ANS-C01 practice questions for the AWS Certified Advanced Networking - Specialty exam, with the correct answer and a full explanation for every option. Read the first 10 below, browse all 512 by number, or take a timed practice exam.

Question bank last updated December 2024

Start timed practice exam Browse all 512 questions

Free ANS-C01 practice questions

Questions 1 to 10 of 512

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

ANS-C01 Question 1

Single answer

Your company operates a multi-region architecture with critical web applications hosted in both the us-east-1 and us-west-2 AWS regions. You need to design a network solution that maintains low-latency communication between the regions, ensures high availability, and provides redundancy. Which solution should you choose?

A
Set up an AWS Direct Connect connection between the two regions.
B
Use an AWS Transit Gateway to establish peering between the VPCs in us-east-1 and us-west-2.
C
Create a VPC peering connection between the VPCs in us-east-1 and us-west-2.
D
Use an AWS Global Accelerator to route traffic between the regions.

Show answer and explanation

Correct answer: B

Explanation

To enable low-latency, highly available, and redundant communication between VPCs in different AWS regions, AWS Transit Gateway is the best choice. It supports inter-region peering, provides a scalable solution for connecting multiple VPCs, and offers centralized management. Other options, such as Direct Connect, VPC peering, or Global Accelerator, are not suitable for this specific use case.

A. Incorrect.
This option is incorrect because AWS Direct Connect is designed to provide dedicated private connectivity between on-premises data centers and AWS, not between AWS regions.
B. Correct.
This is the correct answer. AWS Transit Gateway allows you to establish peering between VPCs across regions, providing high availability and low-latency communication. It also supports routing redundancy for improved fault tolerance.
C. Incorrect.
While VPC peering can connect two VPCs in different regions, it is limited in terms of scalability and does not natively provide the high availability and centralized management offered by AWS Transit Gateway.
D. Incorrect.
AWS Global Accelerator is designed to improve the performance and availability of global applications by routing traffic through AWS's global edge network. However, it is not intended for inter-region VPC communication.

ANS-C01 Question 2

Select 2

Your company is deploying a highly available web application across two AWS Regions to serve a global user base. You want to ensure that users are routed to the closest region based on latency while also providing failover capability in case one region becomes unavailable. Which combination of configuration steps would best achieve this goal?

A
Use Amazon Route 53 with a latency-based routing policy to direct traffic to the closest region.
B
Configure Route 53 health checks to monitor the health of your application endpoints in each region.
C
Use an Application Load Balancer (ALB) in each region and configure cross-region load balancing.
D
Set up AWS Global Accelerator to route traffic between regions based on health and latency.
E
Deploy a CloudFront distribution and configure origin failover to switch between the regions.

Show answer and explanation

Correct answers: A, B

Explanation

To achieve latency-based routing and failover between AWS Regions, Amazon Route 53 with a latency-based routing policy and health checks is the most appropriate solution. Latency-based routing ensures that users are directed to the closest region, while health checks enable automatic failover in the event of a region becoming unavailable. The other options either do not fully meet the requirements or are intended for different use cases.

A. Correct.
Using Amazon Route 53 with a latency-based routing policy ensures that users are directed to the AWS Region with the lowest latency, which is essential for optimizing the user experience in a global deployment.
B. Correct.
Route 53 health checks are necessary to monitor the availability of endpoints in each region. This ensures that traffic is rerouted to the healthy region in case one region becomes unavailable.
C. Incorrect.
While an Application Load Balancer can balance traffic within a region or between different availability zones, it does not support cross-region latency-based routing or failover directly.
D. Incorrect.
AWS Global Accelerator provides global traffic routing and failover capabilities, but it is not required in this scenario because Route 53 latency-based routing and health checks are sufficient to meet the requirements.
E. Incorrect.
CloudFront origin failover is designed for CDN-origin redundancy, not for routing traffic between AWS Regions based on latency or health.

ANS-C01 Question 3

Select 2

You are designing a hybrid network architecture for an enterprise that has an on-premises data center and multiple applications hosted in AWS. The on-premises data center connects to AWS using an AWS Direct Connect connection. The enterprise requires highly available connectivity with automatic failover in case the Direct Connect connection goes down. Additionally, the solution must minimize costs and provide consistent performance. Which combination of design choices meets these requirements?

A
Use AWS Direct Connect for primary connectivity and configure a backup VPN connection over the internet.
B
Set up two AWS Direct Connect connections in separate locations and enable BGP for route failover.
C
Deploy an AWS Site-to-Site VPN connection as the primary connection and use AWS Direct Connect as a backup.
D
Configure two AWS Direct Connect connections in Active/Active mode with Direct Connect Gateway.
E
Enable AWS Global Accelerator to handle failover between the Direct Connect and VPN connections.

Show answer and explanation

Correct answers: A, B

Explanation

The best solution is to use AWS Direct Connect as the primary connection for high performance and consistent bandwidth, and configure a backup VPN connection over the internet for failover. Additionally, setting up two Direct Connect connections in separate locations with BGP routing ensures high availability and redundancy. These design choices align with the requirements of minimizing costs while ensuring automatic failover and consistent performance.

A. Correct.
This option is correct as using AWS Direct Connect as the primary connection and a backup VPN over the internet provides high availability and cost efficiency. The VPN acts as a failover mechanism if Direct Connect becomes unavailable.
B. Correct.
This option is correct because setting up two Direct Connect connections in separate locations ensures high availability and fault tolerance. BGP can be used to automatically route traffic via the alternate connection in case of a failure.
C. Incorrect.
This option is incorrect because Site-to-Site VPN as the primary connection does not meet the requirement for consistent performance. Direct Connect provides dedicated bandwidth and lower latency compared to VPN.
D. Incorrect.
This option is incorrect because using two Direct Connect connections in Active/Active mode increases costs unnecessarily and does not align with the requirement to minimize costs.
E. Incorrect.
This option is incorrect because AWS Global Accelerator is not used for failover between Direct Connect and VPN connections. It is primarily designed for improving global application performance and availability.

ANS-C01 Question 4

Single answer

Your organization is deploying a hybrid architecture where on-premises resources need to communicate securely and with low latency to AWS services in a specific region. The on-premises data center has a VPN connection to AWS, but during peak workloads, the VPN experiences high latency and bandwidth limitations. As a network architect, what is the most appropriate solution to address these challenges while maintaining secure connectivity?

A
Set up AWS Direct Connect to establish a dedicated private connection between the on-premises data center and AWS.
B
Increase the bandwidth of the existing VPN connection by using multiple VPN tunnels in a redundant configuration.
C
Configure an AWS Global Accelerator to optimize the network path between the on-premises data center and the AWS region.
D
Deploy a Transit Gateway to interconnect the on-premises data center and AWS services with higher performance.

Show answer and explanation

Correct answer: A

Explanation

The most appropriate solution for low latency and high bandwidth connectivity between on-premises resources and AWS is AWS Direct Connect. It establishes a dedicated, private network connection that bypasses the public internet, addressing the latency and bandwidth limitations of VPN connections. While other options may support certain network configurations, they do not offer the same level of performance and reliability as Direct Connect for this use case.

A. Correct.
This is correct. AWS Direct Connect provides a dedicated, low-latency, and high-bandwidth connection between on-premises data centers and AWS. It is designed specifically to address the limitations of VPN connections in such scenarios.
B. Incorrect.
This is incorrect. While using multiple VPN tunnels can provide redundancy, it does not effectively address bandwidth limitations or significantly reduce latency compared to a dedicated Direct Connect link.
C. Incorrect.
This is incorrect. AWS Global Accelerator improves performance for internet-facing applications by directing traffic through AWS's global backbone network. It does not address the specific requirements of private connectivity between on-premises data centers and AWS.
D. Incorrect.
This is incorrect. AWS Transit Gateway is used to simplify network connectivity between VPCs and on-premises networks, but it does not inherently resolve latency or bandwidth issues. It would still depend on the underlying VPN or Direct Connect for connectivity.

ANS-C01 Question 5

Select 2

You are designing a global application with users distributed across North America, Europe, and Asia. The application requires low latency and high availability. Additionally, the application serves dynamic content and must efficiently manage user traffic to the nearest and healthiest endpoint. Which combination of AWS edge network services should you implement to meet these requirements?

A
Amazon Route 53 latency-based routing
B
AWS Global Accelerator
C
Amazon CloudFront with an origin in a single AWS Region
D
Elastic Load Balancer with cross-region load balancing enabled
E
Amazon Route 53 geolocation routing

Show answer and explanation

Correct answers: A, B

Explanation

The combination of Amazon Route 53 latency-based routing and AWS Global Accelerator provides an optimal solution for a global application requiring low latency and high availability. Route 53 ensures that user requests are routed to the endpoint with the lowest latency, while Global Accelerator improves the performance of traffic routing to the nearest AWS edge location and dynamically manages user traffic to healthy endpoints. Other options, like CloudFront and geolocation routing, are less suitable for dynamic content optimization and latency-sensitive applications.

A. Correct.
Amazon Route 53 latency-based routing ensures that user requests are directed to the endpoint with the lowest network latency, improving overall performance for global users.
B. Correct.
AWS Global Accelerator optimizes traffic routing to the nearest AWS edge location and improves performance and availability using Anycast. It is ideal for dynamic content and global applications.
C. Incorrect.
Amazon CloudFront is designed for caching static content at edge locations, not dynamic content. Using a single origin would not optimize performance for global users.
D. Incorrect.
Elastic Load Balancer with cross-region load balancing can distribute traffic between regions, but it doesn't handle edge optimizations or dynamic routing based on user proximity.
E. Incorrect.
Amazon Route 53 geolocation routing directs traffic based on the user’s geographic location, but it does not account for actual network latency, which is critical for optimizing performance.

ANS-C01 Question 6

Select 2

Your company is launching a globally distributed application that serves dynamic content to users. The application needs to ensure low latency for users worldwide while efficiently managing traffic. You are tasked with designing a solution that incorporates AWS edge network services. Which combination of services should you use to optimize user performance and traffic management?

A
Amazon CloudFront for content delivery and AWS Global Accelerator for traffic management
B
Amazon CloudFront for dynamic content delivery and Route 53 latency-based routing for traffic management
C
AWS Global Accelerator for traffic management and Amazon S3 for caching dynamic content
D
Amazon CloudFront for caching static content and AWS Direct Connect for low-latency user connections
E
AWS Global Accelerator for traffic management and AWS App Mesh for content delivery optimization

Show answer and explanation

Correct answers: A, B

Explanation

To optimize global user performance and traffic management, combining Amazon CloudFront for content delivery and services like AWS Global Accelerator or Route 53 for traffic routing is the most effective approach. CloudFront reduces latency by caching content at edge locations, while Global Accelerator and Route 53 latency-based routing ensure traffic is directed to the nearest or most performant AWS region. Other options like S3 or Direct Connect do not align with the requirements of edge services or global traffic management.

A. Correct.
Correct. Amazon CloudFront is an AWS edge service designed for low-latency content delivery, while AWS Global Accelerator improves traffic management by routing requests to the nearest AWS region based on network performance.
B. Correct.
Correct. Amazon CloudFront can handle dynamic content delivery with low latency, and Route 53's latency-based routing allows traffic to be routed to the nearest region with the best latency for users.
C. Incorrect.
Incorrect. While AWS Global Accelerator can manage traffic, Amazon S3 is not suitable for caching dynamic content, as it is primarily used for static object storage.
D. Incorrect.
Incorrect. Amazon CloudFront is used for caching static content, but AWS Direct Connect is not an edge service and does not optimize traffic or user performance for global architectures.
E. Incorrect.
Incorrect. AWS Global Accelerator does manage traffic effectively, but AWS App Mesh is a service mesh for microservices and is not a solution for content delivery optimization.

ANS-C01 Question 7

Select 3

Your organization runs a globally distributed web application with users accessing the application from different continents. You need to design a solution to ensure low latency, optimized user performance, and effective traffic management based on geography. Which AWS services and configurations should you incorporate?

A
Use Amazon CloudFront with edge locations to cache content closer to users.
B
Implement AWS Global Accelerator to route user traffic to the optimal endpoint based on geography and performance.
C
Deploy multiple ALBs (Application Load Balancers) in each region and use Route 53 for latency-based routing.
D
Leverage AWS Transit Gateway to route user traffic between edge locations and your on-premises data centers.
E
Enable Amazon S3 Transfer Acceleration for dynamic content delivery across the globe.

Show answer and explanation

Correct answers: A, B, C

Explanation

To optimize user performance and traffic management for a globally distributed application, you need to utilize services that reduce latency and improve routing efficiency. Amazon CloudFront ensures cached content is delivered closer to users, AWS Global Accelerator routes traffic using the AWS global network for optimal performance, and latency-based routing in Route 53 directs users to the nearest or fastest regional endpoint. These services collectively address the requirements for low latency and effective global traffic management.

A. Correct.
Amazon CloudFront provides a globally distributed network of edge locations that cache content closer to users, reducing latency and optimizing performance. This is a key service for edge network optimization.
B. Correct.
AWS Global Accelerator uses the AWS global network to route traffic to the optimal endpoint based on geography and health, improving performance and availability for global applications.
C. Correct.
Using multiple Application Load Balancers (ALBs) in different regions and configuring Route 53 for latency-based routing ensures that user requests are served from the region with the lowest latency, optimizing performance.
D. Incorrect.
AWS Transit Gateway is used for interconnecting VPCs and on-premises networks but is not designed for edge network optimization or user traffic management for global architectures.
E. Incorrect.
Amazon S3 Transfer Acceleration is specifically designed for data transfer optimization to S3 buckets, not for dynamic content delivery or global application traffic management.

ANS-C01 Question 8

Select 2

You are designing an application that serves a global user base with low latency requirements. The application involves static content, dynamic content, and API traffic. To ensure optimal user performance and efficient traffic management, which combination of AWS services would you use?

A
Amazon CloudFront with AWS Global Accelerator
B
Amazon S3 Transfer Acceleration
C
AWS Direct Connect
D
Amazon Route 53 with latency-based routing
E
AWS Elastic Load Balancer (ELB) configured with geolocation routing

Show answer and explanation

Correct answers: A, D

Explanation

To optimize user performance and traffic management for global architectures, Amazon CloudFront ensures low-latency delivery of static and dynamic content through its edge locations, while AWS Global Accelerator provides optimized routing for APIs and dynamic traffic. Combining this with Amazon Route 53's latency-based routing ensures traffic is routed to the closest and most optimal AWS region or endpoint, achieving the desired performance for a global user base.

A. Correct.
Amazon CloudFront and AWS Global Accelerator together provide a highly optimized global distribution system for static and dynamic content. CloudFront caches content at edge locations for low latency, while Global Accelerator optimizes routing for dynamic content and APIs.
B. Incorrect.
Amazon S3 Transfer Acceleration is designed for faster uploads of content to S3, but it is not suitable for optimizing the overall performance of a global application serving diverse types of traffic such as APIs or dynamic content.
C. Incorrect.
AWS Direct Connect is a private network connection to AWS that improves performance for on-premises workloads. However, it does not optimize edge network performance for a global user base.
D. Correct.
Amazon Route 53 with latency-based routing is ideal for directing user traffic to the most optimal AWS region based on latency, ensuring improved performance for a global user base.
E. Incorrect.
AWS Elastic Load Balancer (ELB) does not directly provide geolocation routing. It is primarily used for distributing traffic within a single region or VPC, making it unsuitable for this global use case.

ANS-C01 Question 9

Select 2

Your organization is migrating a hybrid workload to AWS. Part of the architecture includes a VPN connection between your on-premises data center and a VPC. During testing, you notice intermittent connectivity issues between the on-premises resources and AWS. After reviewing the setup, you need to determine the most likely cause of the issue. Which of the following could be potential causes? (Choose TWO)

A
The VPN tunnel's pre-shared key (PSK) does not match between the on-premises router and AWS.
B
The Security Group associated with the VPC does not allow traffic from the on-premises network.
C
The Customer Gateway IP address configured in AWS does not match the public IP of the on-premises router.
D
The on-premises router does not support Border Gateway Protocol (BGP).
E
The VPC Route Table does not include a route for the on-premises network via the VPN.

Show answer and explanation

Correct answers: A, C

Explanation

Intermittent VPN connectivity issues are often caused by mismatched configurations between AWS and on-premises devices. A mismatched PSK (Option 1) or incorrect Customer Gateway IP address (Option 3) are common culprits because they directly affect the ability of the VPN tunnel to establish and maintain a stable connection. Other options, while important for overall connectivity, are less likely to cause intermittent issues in this specific scenario.

A. Correct.
If the pre-shared key (PSK) does not match between the on-premises router and AWS, the VPN tunnel will not establish or will face intermittent connectivity issues due to authentication failures.
B. Incorrect.
While Security Groups are essential for controlling inbound and outbound traffic to resources within the VPC, they do not directly affect the VPN connectivity between the on-premises network and AWS.
C. Correct.
The Customer Gateway IP address in AWS must match the public IP of the on-premises router. If they do not match, the VPN tunnel cannot establish a stable connection.
D. Incorrect.
BGP is not a strict requirement for the VPN connection to work. AWS also supports static routing instead of dynamic routing with BGP.
E. Incorrect.
While the VPC Route Table must include a route for the on-premises network via the VPN, this issue would result in traffic not routing correctly, rather than intermittent connectivity issues.

ANS-C01 Question 10

Select 2

Your company has deployed a multi-region application on AWS that uses Amazon Route 53 for DNS routing and Amazon CloudFront for content delivery. The application must meet the following requirements:

Automatically route users to the lowest latency backend based on their location.
Provide high availability by routing traffic to another region in case of failure.

Which Route 53 routing policy or combination of policies should you use to meet these requirements?

A
Latency-based routing
B
Geolocation routing
C
Failover routing
D
Weighted routing
E
Simple routing

Show answer and explanation

Correct answers: A, C

Explanation

To meet the requirements, you need a combination of latency-based routing for directing users to the lowest latency backend and failover routing to ensure traffic is routed to a secondary region in case of a failure. Latency-based routing ensures an optimal user experience, while failover routing ensures high availability.

A. Correct.
Latency-based routing is correct because it allows Route 53 to evaluate the latency between the user's location and the available AWS regions, ensuring users are routed to the backend with the lowest latency.
B. Incorrect.
Geolocation routing is incorrect because it routes users based on their geographic location, not latency, and does not provide fallback capabilities in case of failure.
C. Correct.
Failover routing is correct because it allows you to configure Route 53 to route traffic to a secondary region in case the primary region becomes unavailable, ensuring high availability.
D. Incorrect.
Weighted routing is incorrect because it is used to control traffic distribution across multiple resources based on assigned weights, not for latency-based or failover purposes.
E. Incorrect.
Simple routing is incorrect because it only routes traffic to a single resource and does not meet the requirements for latency optimization or high availability.

Timed practice exam

Take a ANS-C01 practice test under exam conditions

65 questions in 170 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

What the ANS-C01 exam covers

Official AWS Certified Advanced Networking - Specialty exam domains and weightings.

Network Design
30% of exam
Network Implementation
26% of exam
Network Management and Operations
20% of exam
Network Security, Compliance, and Governance
24% of exam

ANS-C01 practice questions 1 to 100 of 512

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 6 pages of up to 100 questions.

ANS-C01 exam dumps FAQ

Are these ANS-C01 dumps real exam questions?

No. These are original practice questions written to the AWS Certified Advanced Networking - Specialty exam objectives, not questions copied from a live exam. Memorising leaked questions violates Amazon Web Services's candidate agreement and stops working the moment the question pool rotates. Use this bank to check your understanding of each domain and to find the topics you still need to study.

How many ANS-C01 practice questions are there?

512 questions, each with the correct answer, an explanation of the answer, and a note on why every other option is wrong. The first 10 are on this page and every question has its own page linked below.

Are the ANS-C01 exam dumps free?

Yes. Every question, answer and explanation on this page and the linked question pages is free to read without an account. A free HydraNode account adds timed practice exams, scoring and progress tracking across attempts.

How do I take a timed ANS-C01 practice test?

Sign in and start the AWS Certified Advanced Networking - Specialty exam on HydraNode. A session gives you 65 questions drawn from this bank in 170 minutes, then a score report with a per-question review.

What topics does the ANS-C01 exam cover?

The official exam domains are: Network Design; Network Implementation; Network Management and Operations; Network Security, Compliance, and Governance.

More AWS exam dumps

All AWS exams

AIF-C01230 questions

AWS Certified AI Practitioner exam dumps

AWS Certified AI Practitioner

CLF-C02341 questions

AWS Certified Cloud Practitioner exam dumps

AWS Certified Cloud Practitioner

DEA-C01549 questions

AWS Data Engineer Associate exam dumps

AWS Certified Data Engineer - Associate

DOP-C02410 questions

AWS DevOps Engineer Professional exam dumps

AWS Certified DevOps Engineer - Professional

DVA-C02398 questions

AWS Developer Associate exam dumps

AWS Certified Developer - Associate

MLS-C01388 questions

AWS Machine Learning Specialty exam dumps

AWS Certified Machine Learning - Specialty

MLA-C01457 questions

AWS Machine Learning Engineer Associate exam dumps

AWS Certified Machine Learning Engineer - Associate

SCS-C02503 questions

AWS Security Specialty exam dumps

AWS Certified Security - Specialty