Amazon Web ServicesExpert levelANS-C01Page 5 of 6

ANS-C01 exam dumps: questions 401 to 500 of 512

Page 5 of the free ANS-C01 question bank for the AWS Certified Advanced Networking - Specialty exam. Questions 401 to 500 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated December 2024

Free ANS-C01 practice questions

Questions 401 to 405 of 512

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

ANS-C01 Question 401

Select 3

Your organization is live-streaming a company-wide event to thousands of employees spread across multiple locations. The event needs to be accessible in real-time with minimal latency while reducing overall bandwidth consumption. Which methods can be used to achieve this goal?

  1. A

    Use Amazon CloudFront to distribute the live stream to employees globally via edge locations.

  2. B

    Implement a multicast network strategy to deliver the stream within the organization's on-premises network.

  3. C

    Deploy multiple unicast streams from the source to each employee's device to ensure reliable delivery.

  4. D

    Leverage AWS Elemental MediaLive to encode the stream and use AWS Elemental MediaPackage for optimized delivery.

Show answer and explanation

Correct answers: A, B, D

Explanation

To reduce bandwidth consumption for a live-streaming event, combining AWS services like CloudFront for global delivery, multicast for on-premises efficiency, and MediaLive/MediaPackage for optimized encoding and delivery provides an effective solution. These approaches minimize network strain while ensuring a smooth viewing experience. Unicast, on the other hand, increases bandwidth usage and is not suitable for the specified scenario.

  • A. Correct.

    Amazon CloudFront is a content delivery network capable of caching and delivering content to edge locations, significantly reducing bandwidth usage and improving performance for global audiences.

  • B. Correct.

    Multicast is an efficient way to deliver the same data to multiple recipients within an on-premises network, reducing bandwidth usage as compared to multiple unicast streams.

  • C. Incorrect.

    Unicast streams send individual streams to every recipient, which increases bandwidth usage and does not align with the goal of reducing bandwidth consumption.

  • D. Correct.

    AWS Elemental MediaLive and MediaPackage are AWS services that can encode and optimize video streams for efficient delivery, further reducing bandwidth consumption and ensuring high-quality real-time streaming.

ANS-C01 Question 402

Single answer

A company needs a cost-effective solution to transfer large volumes of data between their on-premises environment and their VPC in AWS. The data transfer is expected to be consistent, but the company does not require high throughput or dedicated bandwidth. Which solution should they implement?

  1. A

    Set up an AWS Site-to-Site VPN connection between the on-premises environment and the VPC.

  2. B

    Establish an AWS Direct Connect connection with a 10 Gbps dedicated line.

  3. C

    Utilize AWS Snowball devices for regular data transfers.

  4. D

    Use the internet with a public IP address to transfer data directly to the VPC.

Show answer and explanation

Correct answer: A

Explanation

The AWS Site-to-Site VPN connection is the best choice for this scenario as it provides a secure, reliable, and cost-effective solution for consistent data transfer between on-premises environments and a VPC. It does not require the high costs associated with AWS Direct Connect and is more practical than AWS Snowball or unsecured internet connections for ongoing data transfers.

  • A. Correct.

    An AWS Site-to-Site VPN is a cost-effective solution for secure data transfer between on-premises and AWS. While it does not offer the high throughput of AWS Direct Connect, it is sufficient for consistent data transfers without requiring a dedicated line.

  • B. Incorrect.

    AWS Direct Connect is designed for high-throughput, low-latency connections, but it involves significant costs for dedicated lines and is not the most cost-effective option for this use case.

  • C. Incorrect.

    AWS Snowball is suited for one-time or infrequent large-scale data transfers, but it is not practical for consistent, ongoing data transfer needs.

  • D. Incorrect.

    Using the internet with a public IP address is not secure and could result in high variability in performance, making it unsuitable for consistent and secure data transfer.

ANS-C01 Question 403

Single answer

You are designing a cost-effective solution for transferring data between your on-premises environment and an Amazon VPC. The data transfer requirements are moderate, and your organization wants to avoid the cost of a dedicated physical connection. Which connectivity option would best meet these requirements?

  1. A

    AWS Direct Connect

  2. B

    AWS Site-to-Site VPN

  3. C

    AWS Transit Gateway with Direct Connect attachment

  4. D

    Internet Gateway with public IPs

Show answer and explanation

Correct answer: B

Explanation

For moderate data transfer needs between an on-premises environment and a VPC, AWS Site-to-Site VPN offers a secure and cost-effective solution. It leverages the internet to establish a VPN connection, avoiding the higher costs of dedicated physical connections like Direct Connect or the complexity of Transit Gateway. While an Internet Gateway with public IPs could technically enable data transfer, it lacks the security and encryption needed for such scenarios, making AWS Site-to-Site VPN the best choice.

  • A. Incorrect.

    AWS Direct Connect provides a dedicated physical connection for high-bandwidth, low-latency requirements. However, it is more expensive compared to other options, making it less suitable for cost-sensitive scenarios with moderate data transfer needs.

  • B. Correct.

    AWS Site-to-Site VPN is a cost-effective option for securely connecting an on-premises environment to an Amazon VPC over the internet. It is well-suited for moderate data transfer needs and avoids the higher costs of dedicated connections like Direct Connect.

  • C. Incorrect.

    AWS Transit Gateway with Direct Connect attachment is designed for large-scale and complex network architectures. It is more expensive and not necessary for moderate data transfer needs, making it a less cost-effective option in this scenario.

  • D. Incorrect.

    An Internet Gateway with public IPs can be used to transfer data over the public internet, but it lacks security features such as encryption, which are often required for connectivity between on-premises environments and VPCs. This makes it unsuitable for most production use cases.

ANS-C01 Question 404

Select 2

Your company needs to transfer a large amount of data between an on-premises data center and an Amazon VPC. The connection must be cost-effective while maintaining consistent performance. Which of the following options would you consider? (Choose TWO)

  1. A

    AWS Direct Connect with a 1 Gbps connection

  2. B

    AWS Site-to-Site VPN over the internet

  3. C

    Using AWS Snowball Edge for initial data transfer and Site-to-Site VPN for ongoing synchronization

  4. D

    Using an internet gateway and Elastic IPs for data transfer

  5. E

    AWS Transit Gateway with Direct Connect Gateway

Show answer and explanation

Correct answers: A, C

Explanation

For cost-effective connectivity between a VPC and an on-premises environment, AWS Direct Connect provides a dedicated connection with consistent performance and avoids high internet bandwidth costs. For initial large data transfers, AWS Snowball Edge is highly cost-effective, and pairing it with Site-to-Site VPN for ongoing synchronization ensures efficiency while keeping costs low.

  • A. Correct.

    AWS Direct Connect with a 1 Gbps connection provides dedicated, consistent bandwidth between on-premises and AWS. It's cost-effective for large data transfers because you avoid internet bandwidth charges and gain consistent performance.

  • B. Incorrect.

    AWS Site-to-Site VPN over the internet is a viable option for secure connectivity, but it is not cost-effective for ongoing large data transfers due to potential internet bandwidth costs and inconsistent performance.

  • C. Correct.

    Using AWS Snowball Edge for the initial data transfer reduces the costs and time for transferring large datasets. Combining it with Site-to-Site VPN for ongoing synchronization can be a cost-effective and efficient solution.

  • D. Incorrect.

    Using an internet gateway and Elastic IPs for data transfer is not a recommended solution for large data movement due to high data transfer costs and lack of consistent performance.

  • E. Incorrect.

    AWS Transit Gateway with Direct Connect Gateway is a scalable solution, but it is more suitable for complex multi-VPC and multi-region architectures rather than cost-effective direct connectivity for large data transfers.

ANS-C01 Question 405

Select 2

Your company needs to establish a cost-effective and secure connection between an on-premises data center and an Amazon VPC for periodic data transfers. The data transfer requirements are low and do not justify the need for a dedicated physical connection. Which connectivity options should you explore?

  1. A

    AWS Direct Connect

  2. B

    Site-to-Site VPN over the internet

  3. C

    AWS PrivateLink

  4. D

    AWS Transit Gateway with Site-to-Site VPN

  5. E

    VPC Peering

Show answer and explanation

Correct answers: B, D

Explanation

For low data transfer needs, Site-to-Site VPN over the internet is a cost-effective and secure option to connect an on-premises data center to a VPC. If there is a need to manage multiple VPN connections efficiently, AWS Transit Gateway combined with Site-to-Site VPN could be employed for scalable and centralized connectivity. AWS Direct Connect, while highly reliable, is not cost-effective for low traffic, and the other options (AWS PrivateLink and VPC Peering) do not address on-premises connectivity.

  • A. Incorrect.

    AWS Direct Connect is a dedicated physical connection between on-premises and AWS. While highly secure and reliable, it is not cost-effective for low data transfer needs.

  • B. Correct.

    Site-to-Site VPN over the internet is a cost-effective and secure option for connecting on-premises to a VPC when data transfer requirements are relatively low.

  • C. Incorrect.

    AWS PrivateLink is used to privately access services hosted on AWS without exposing them to the public internet. It is not suitable for connecting on-premises environments to a VPC.

  • D. Correct.

    AWS Transit Gateway with Site-to-Site VPN can consolidate and manage multiple VPN connections cost-effectively. It is a viable and scalable option when low-cost connectivity is required for multiple VPCs and on-premises environments.

  • E. Incorrect.

    VPC Peering connects two VPCs to enable communication between them. It cannot be used for connecting on-premises environments to a VPC.

Timed practice exam

Take a ANS-C01 practice test under exam conditions

65 questions in 170 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

ANS-C01 practice questions 401 to 500 of 512

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 6 pages of up to 100 questions.

  1. 401.Your organization is live-streaming a company-wide event to thousands of employees spread across multiple...
  2. 402.A company needs a cost-effective solution to transfer large volumes of data between their on-premises...
  3. 403.You are designing a cost-effective solution for transferring data between your on-premises environment and an...
  4. 404.Your company needs to transfer a large amount of data between an on-premises data center and an Amazon VPC....
  5. 405.Your company needs to establish a cost-effective and secure connection between an on-premises data center and...
  6. 406.Your company is running an application on EC2 instances within a VPC. You need to configure the instances to...
  7. 407.You are designing a highly available architecture for a web application hosted on Amazon EC2 instances in a...
  8. 408.An enterprise is migrating its on-premises workload to AWS and is designing its VPC architecture. The...
  9. 409.An organization is running applications on Amazon EC2 instances in a VPC and needs to manage traffic between...
  10. 410.Your company hosts a web application using multiple EC2 instances across two AWS Regions: us-east-1 and...
  11. 411.A company needs to ensure high availability for its web application using Amazon Route 53. They have deployed...
  12. 412.Your organization hosts a multi-region web application. You want to use Amazon Route 53 to direct users to...
  13. 413.An e-commerce company uses Amazon Route 53 to manage DNS for their public website. The company wants to...
  14. 414.Your company has a global application hosted across multiple AWS regions to ensure high availability and low...
  15. 415.An e-commerce company hosts its website using AWS, and they want to ensure high availability and reliability...
  16. 416.Your company has a requirement to set up a highly available DNS architecture using Amazon Route 53. The goal...
  17. 417.Your company runs a global e-commerce platform. To ensure high availability and reliability for your DNS...
  18. 418.You are designing a highly available application that must handle millions of requests per second and...
  19. 419.You are designing a high-traffic web application that requires low latency, high availability, and the...
  20. 420.Your company is running a web application hosted on Amazon EC2 instances behind an Application Load Balancer...
  21. 421.Your organization hosts a multi-region web application in AWS. The application requires high availability and...
  22. 422.You are designing a VPC for a new application that requires high availability and scalability across multiple...
  23. 423.You are designing a VPC architecture for a high-traffic web application hosted on AWS. The application...
  24. 424.You are designing a VPC for a multi-tier application in AWS. The application has a public-facing web layer,...
  25. 425.Your company is designing a new application in AWS that requires the use of a VPC to host its resources. The...
  26. 426.You are designing a multi-region application that communicates between on-premises data centers and AWS VPCs...
  27. 427.You are designing a hybrid architecture where on-premises resources connect to AWS via a Direct Connect...
  28. 428.You are designing a hybrid network that connects your on-premises data center to your AWS environment using...
  29. 429.Your organization is using an AWS Direct Connect connection to transfer large amounts of data between your...
  30. 430.A company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The...
  31. 431.You are managing the network security of an application hosted on AWS that requires strict compliance with...
  32. 432.An organization has implemented a distributed application hosted across multiple AWS accounts, using a shared...
  33. 433.Your company has deployed a set of web applications in an Amazon VPC, and you are tasked with ensuring that...
  34. 434.You are designing a network architecture for a financial services company that must comply with strict...
  35. 435.An organization is running a multi-tier web application on AWS and needs to ensure that only HTTPS traffic is...
  36. 436.Your organization requires that all traffic between your VPC and an on-premises data center be encrypted and...
  37. 437.You are designing a hybrid network architecture for a company that needs to connect its on-premises data...
  38. 438.Your organization has implemented a hybrid cloud architecture using AWS Direct Connect to connect its...
  39. 439.Your company is deploying a multi-region web application using an Amazon VPC with private and public subnets....
  40. 440.Your organization has deployed a multi-region application using AWS Global Accelerator to improve performance...
  41. 441.You are designing a multi-tier web application hosted on AWS. The application consists of a public-facing web...
  42. 442.You are designing a multi-tier web application hosted on AWS. The application includes a public-facing web...
  43. 443.Your company is hosting a multi-tier web application on AWS. The architecture includes an Application Load...
  44. 444.Your organization is deploying a multi-tier web application on AWS. The architecture includes a public-facing...
  45. 445.Your company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB)....
  46. 446.Your company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer....
  47. 447.Your company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer (ALB)...
  48. 448.An organization has deployed a highly available web application on AWS using an Application Load Balancer...
  49. 449.You are designing a highly secure architecture for an application that involves communication between an...
  50. 450.You are designing a multi-tier application hosted on AWS. The application includes a public-facing web tier...
  51. 451.An organization is deploying a web application on AWS that requires secure communication between its frontend...
  52. 452.Your company is deploying a multi-tier web application on AWS. The application consists of a public-facing...
  53. 453.Your company operates in a highly regulated industry and needs to design a multi-VPC architecture that...
  54. 454.An organization needs to design a secure network architecture in AWS to meet compliance requirements for...
  55. 455.Your company needs to design an AWS network architecture for a new application that processes sensitive...
  56. 456.Your company operates in the financial sector and must comply with strict regulatory requirements, including...
  57. 457.Your organization has deployed a critical web application in an Amazon VPC, and you need to ensure that...
  58. 458.Your company has deployed an application in a VPC on AWS, and you are tasked with ensuring that security...
  59. 459.Your organization has deployed a multi-tier application in AWS using an Application Load Balancer (ALB) in...
  60. 460.Your organization has deployed a VPC with multiple subnets and EC2 instances hosting sensitive data. To...
  61. 461.A company is migrating its application to AWS and wants to ensure high availability and low latency for users...
  62. 462.You are designing a hybrid network architecture for a company that has on-premises data centers and workloads...
  63. 463.Your organization has a hybrid cloud architecture and uses AWS Direct Connect to establish a private...
  64. 464.You are designing a hybrid cloud architecture for an organization that requires secure and low-latency...
  65. 465.Your organization recently deployed an application in a VPC that handles sensitive data. To ensure compliance...
  66. 466.Your organization has deployed a highly distributed application across multiple AWS Regions. The application...
  67. 467.Your company has a hybrid cloud environment with on-premises infrastructure and multiple VPCs across...
  68. 468.Your organization has deployed several Amazon VPCs across different AWS regions, and you need to centrally...
  69. 469.A company runs a critical web application on Amazon EC2 instances behind an Application Load Balancer (ALB)....
  70. 470.You are managing a critical web application running on Amazon EC2 instances behind an Application Load...
  71. 471.Your organization has deployed a multi-tier application on AWS, with an Application Load Balancer (ALB) in...
  72. 472.An organization has deployed a highly available web application on AWS using Auto Scaling groups behind an...
  73. 473.You are a network administrator managing an e-commerce application hosted on AWS. To troubleshoot...
  74. 474.Your organization uses an application hosted in AWS, which includes an Application Load Balancer (ALB),...
  75. 475.Your organization runs a global e-commerce platform on AWS. As part of a security audit, the team wants to...
  76. 476.Your company has a hybrid cloud architecture where an application is hosted on both AWS and on-premises...
  77. 477.An organization wants to analyze DNS query logs for their domain hosted on Amazon Route 53. They need a...
  78. 478.A company wants to analyze DNS query logs for security insights and operational monitoring. They currently...
  79. 479.Your company is using Amazon Route 53 for DNS management and wants to monitor DNS query logs for security and...
  80. 480.Your organization uses Amazon Route 53 as a DNS service and wants to collect detailed query logs for...
  81. 481.Your organization uses multiple AWS accounts managed under AWS Organizations. As part of a security audit,...
  82. 482.Your organization has been experiencing misconfigured security groups that inadvertently expose sensitive...
  83. 483.Your organization has deployed a large number of EC2 instances with associated security groups across...
  84. 484.Your organization operates in a multi-account setup with hundreds of security groups across different AWS...
  85. 485.You are designing a secure architecture for a hybrid application that communicates between an on-premises...
  86. 486.Your organization runs a multi-region web application on AWS, and you need to ensure that all data...
  87. 487.You are managing an AWS network architecture for a financial institution that requires strict compliance with...
  88. 488.Your organization has deployed a web application on Amazon EC2 instances behind an Application Load Balancer...
  89. 489.Your organization is running a multi-region application hosted in AWS. The application uses Amazon Route 53...
  90. 490.You are designing a multi-region failover solution for an application hosted on AWS. The application uses an...
  91. 491.Your company is deploying a multi-region application that serves users across the globe. To ensure low...
  92. 492.Your company hosts a multi-tier application on AWS with an Auto Scaling group for the web tier, an...
  93. 493.Your company is running a multi-tier application in AWS, and security is a top priority. You need to enforce...
  94. 494.You are designing a secure network architecture for an application hosted in AWS. The application handles...
  95. 495.Your company has deployed a mission-critical application on AWS that handles sensitive financial data. To...
  96. 496.A financial services company needs to ensure that all data transmitted between their on-premises data center...
  97. 497.Your company has set up an AWS Direct Connect connection to establish a private network link between your...
  98. 498.Your company has established an AWS Direct Connect connection between its on-premises data center and AWS....
  99. 499.Your organization has established an AWS Direct Connect connection between its on-premises data center and...
  100. 500.Your company has established an AWS Direct Connect connection to improve network performance and reduce...