ANS-C01 Exam Questions
305 real ANS-C01 exam questions with expert-verified answers and explanations. Page 5 of 7.
- Question #201Hybrid Connectivity
A company has a total of 30 VPCs. Three AWS Regions each contain 10 VPCs. The company has attached the VPCs in each Region to a transit gateway in that Region. The company also has...
- Question #202Network Management and Operation
A company needs to manage Amazon EC2 instances through command line interfaces for Linux hosts and Windows hosts. The EC2 instances are deployed in an environment in which there is...
- Question #203Network Security
A network engineer needs to improve the network security of an existing AWS environment by adding an AWS Network Firewall firewall to control internet-bound traffic. The AWS enviro...
- Question #204VPC Connectivity
A company is planning to migrate an internal application to the AWS Cloud. The application will run on Amazon EC2 instances in one VPC. Users will access the application from the c...
- Question #205Network Security, Compliance, and Governance
A company uses Amazon Route 53 for its DNS needs. The company's security team wants to update the DNS infrastructure to provide the most recent security posture. The security team...
- Question #206VPC Connectivity
A company has agreed to collaborate with a partner for a research project. The company has multiple VPCs in the us-east-1 Region that use CIDR blocks within 10.10.0.0/16. The VPCs...
- Question #207Network Security
A company has a public application. The application uses an Application Load Balancer (ALB) that has a target group of Amazon EC2 instances. The company wants to protect the applic...
- Question #208Network Design
A company has an application that hosts personally identifiable information (PII) of users. All connections to the application must be secured by HTTPS with TLS certificates that i...
Network Load BalancerTLS OffloadingECC CertificatesStateful Connections - Question #209Network Design
A company hosts infrastructure services in multiple VPCs across multiple accounts in the us- west-2 Region. The VPC CIDR blocks do not overlap. The company wants to connect the VPC...
Transit GatewaySite-to-Site VPNVPN AccelerationHybrid Connectivity - Question #210VPC Connectivity
A company has a transit gateway in AWS Account A. The company uses AWS Resource Access Manager (AWS RAM) to share the transit gateway so that users in other accounts can connect to...
- Question #211Network Design
A company has started using AWS Cloud WAN with one edge location in the us-east-1 Region. The company has a production segment and a security segment in AWS Cloud WAN. The company...
- Question #212Network Design
A company has two business units (BUs). The company operates in the us-east-1 Region and the us-west-1 Region. The company plans to extend to more Regions in the future. Each BU ha...
- Question #213Network Management and Operation
A company has an AWS Site-to-Site VPN connection between AWS and its branch office. A network engineer is troubleshooting connectivity issues that the connection is experiencing. T...
- Question #214Network Management and Operation
An education agency is preparing for its annual competition between schools. In the competition, students at schools from around the country solve math problems, complete puzzles,...
- Question #215VPC Connectivity
A company securely connects resources that are in its VPC to a software as a service (SaaS) solution from a SaaS provider. The SaaS solution is hosted in the AWS Cloud and is power...
- Question #216Network Security
A company wants to use an AWS Network Firewall firewall to secure its workloads in the cloud through network traffic inspection. The company must record complete metadata informati...
- Question #217Network Implementation
A company is building a new workload on AWS that uses an Application Load Balancer (ALB). The company has configured a new ALB target group that uses slow start mode. A team begins...
- Question #218Network Security
A network engineer is using AWS Direct Connect connections and MACsec to encrypt data from a corporate data center to the Direct Connect location. The network engineer learns that...
Direct ConnectMACsecKey ManagementNetwork Security - Question #219Hybrid Connectivity
A network engineer configures a second AWS Direct Connect connection to an existing network. The network engineer runs a test in the AWS Direct Connect Resiliency Toolkit on the co...
- Question #220VPC Connectivity
A company is building an API-based application on AWS and is using a microservices architecture for the design. The company is using a multi-account AWS environment that includes a...
- Question #221Network Implementation
A company's VPC has Amazon EC2 instances that are communicating with AWS services over the public internet. The company needs to change the connectivity so that the communication d...
- Question #222Hybrid Connectivity
An international company wants to implement a multi-site hybrid infrastructure. The company wants to deploy its cloud computing resources on AWS in the us-east-1 Region and in the...
- Question #223Network Security, Compliance, and Governance
A company's AWS infrastructure is spread across more than 50 accounts and across five AWS Regions. The company needs to manage its security posture with simplified administration a...
- Question #224Network Security
A company is using an Amazon CloudFront distribution that is configured with an Application Load Balancer (ALB) as an origin. A network engineer needs to implement a solution that...
CloudFrontSecurity GroupManaged Prefix ListALB - Question #225Network Security, Compliance, and Governance
A company has AWS accounts in an organization in AWS Organizations. The company has implemented Amazon VPC IP Address Manager (IPAM) in its networking AWS account. The company is u...
- Question #226Hybrid Connectivity
A company has an application that runs on premises. The application needs to communicate with an application that runs in a VPC on AWS. The communication between the applications m...
- Question #227Hybrid Connectivity
A company has established connectivity between its on-premises data center in Paris. France, and the AWS Cloud by using an AWS Direct Connect connection. The company uses a transit...
Transit Gateway PeeringSite-to-Site VPNMulti-Region NetworkingHybrid Connectivity - Question #228Hybrid Connectivity
Company A recently acquired Company B. Company A has a hybrid AWS and on-premises environment that uses a hosted AWS Direct Connect connection, a Direct Connect gateway, and a tran...
Direct Connect GatewayTransit GatewayCross-account networkingHybrid connectivity - Question #229VPC Connectivity
A company has developed a web service for language translation. The web service's application runs on a fleet of Amazon EC2 instances that are in an Auto Scaling group. The instanc...
AWS PrivateLinkVPC Endpoint ServiceNetwork Load Balancer (NLB)Application Load Balancer (ALB) - Question #230Network Design
A company is migrating an application to the AWS Cloud. The company has successfully provisioned and tested connectivity between AWS Direct Connect and the company's on- premises d...
NAT GatewayHybrid NetworkingIP Address ManagementAllow Listing - Question #231Network Design
A company has a highly available application that is hosted in multiple VPCs and in two on- premises data centers. All the VPCs reside in the same AWS Region. All the VPCs require...
- Question #232Hybrid Connectivity
A company has a data center in the us-west-1 Region with a 10 Gbps AWS Direct Connect dedicated connection to a Direct Connect gateway. There are two private VIFs from the same dat...
- Question #233Network Security, Compliance, and Governance
A company is planning to host external websites on AWS. The websites will include multiple tiers such as web servers, application logic services, and databases. The company wants t...
- Question #234Network Implementation
A company has deployed an application in which the front end of the application communicates with the backend instances through a Network Load Balancer (NLB) in the same VPC. The a...
- Question #235Network Security
A company needs to protect against potential botnet command and control traffic from any Amazon EC2 instances that is in in the company's AWS Environment. Which solution will meet...
- Question #236Hybrid Connectivity
A company has two on-premises data centers. The first data center is in the us-east-1 Region. The Second data canter is in the us-east-2 Region. Each data center connects to the cl...
- Question #237VPC Connectivity
A network engineer is working on a large migration effort from an on-premises data center to an AWS Control Tower based multi-account environment. The environment has a transit gat...
AWS Control TowerMulti-Account NetworkingCloudFormationNetwork Automation - Question #238Network Design
An online retail company is running a web application in the us-wast-2 Region and serves consumers in the United States. The company plans to expand across several countries in Eur...
Global DistributionContent Delivery NetworkApplication Load BalancerHigh Availability - Question #239Network Security
A company has VPCs across 50 AWS accounts and is using AWS Organizations. The company wants to implement web filtering. The requirements for how the traffic must be filtered are th...
AWS Network FirewallAWS OrganizationsAWS Resource Access Manager (RAM)Centralized Network Security - Question #240Network Security
A company has an internal web-based application that employees use. The company hosts the application over a VPN in the company's on-premises network. The application runs on a fle...
- Question #241Hybrid Connectivity
A company is running business applications on AWS. The company uses 50 AWS accounts, thousands of VPCs, and 3 AWS Regions across the United States and Europe. A network engineer ne...
Direct ConnectTransit GatewayHybrid ConnectivityMulti-Region Networking - Question #242Hybrid Connectivity
A company has two data centers that are interconnected with multiple redundant links from different suppliers. The company Uses IP addresses that are within the 172.16,0.0/16 CIDR...
BGP CommunitiesDirect ConnectHybrid RoutingRoute Prioritization - Question #243Network Management and Operation
A company is replatforming a legacy data processing solution to AWS. The company deploys the solution on Amazon EC2 Instances in private subnets that are in one VPC. The solution u...
- Question #244Network Implementation
A company ran out of IP address space in one of the Availability Zones in an AWS Region that the company uses. The Availability Zone that is out of space is assigned the 10.10.1.0/...
VPCSubnetsCloudFormationIP Addressing - Question #245Network Implementation
A company's network engineer must implement a cloud-based networking environment for a network operations team to centrally manage. Other Teams will use the environment. Each team...
VPC CreationIPv6 NetworkingMulti-Account NetworkingInternet Connectivity - Question #246Network Security
A company is using third-party firewall appliances to monitor and inspect traffic on premises. The company wants to use the same model on AWS. The Company has a single VPC with an...
- Question #247Network Management and Operation
A financial company offers investment forecasts and recommendations to authorized users through the internet. All the services are hosted in the AWS Cloud. A new compliance require...
- Question #248VPC Connectivity
A company has a VPC in the AWS Cloud. The company recently acquired a competitor that also has a VPC the AWS Cloud. A network engineer discovers an IP address overlap between the t...
AWS PrivateLinkVPC ConnectivityIP OverlapMarketplace Services - Question #249Network Design
A company uses the us-east-1 Region and the ap-south-1 Region for its business units (BUs). The BUS are named BU-1 and BU-Z. For each BU, there are two VPCs in us-east-1 and one VP...
Cloud WANNetwork SegmentationMulti-Region NetworkingOperational Efficiency - Question #250Hybrid Connectivity
A company has many application VPCs that use AWS Site-to-Site VPN connections for connectivity to an on-premises location. The company's network team wants to gradually migrate to...