support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Amazon
  4. ANS-C01

Free ANS-C01 Exam Braindumps
AWS Certified Advanced Networking - Specialty ANS-C01 Questions 137–144 (page: 19)

Updated On: 29-May-2026
Page 19 of 38
PDF with 306 Questions

A company is migrating applications from a data center to AWS. Many of the applications will need to exchange data with the company's on-premises mainframe.

The company needs to achieve 4 Gbps transfer speeds to meet peak traffic demands. A network engineer must design a highly available solution that maximizes resiliency. The solution must be able to withstand the loss of circuits or routers.

Which solution will meet these requirements?

  1. Order four 10 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate one connection from each Direct Connect location to a router at the company location. Terminate the other connection from each Direct Connect location to a different router at the company location.
  2. Order two 10 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate the connection from each Direct Connect location to a different router at the company location.
  3. Order four 1 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate one connection from each Direct Connect location to a router at the company location. Terminate the other connection from each Direct Connect location to a different router at the company location.
  4. Order two 1 Gbps AWS Direct Connect connections that are evenly spread over two locations. Terminate the connection from each Direct Connect location to a different router at the company location.

Answer(s): A



A company has 10 web server Amazon EC2 instances that run in an Auto Scaling group in a production VPC. The company has 10 other web servers that run in an on-premises data center. The company has a 10 Gbps AWS Direct Connect connection between the on-premises data center and the production VPC.

The company needs to implement a load balancing solution that receives HTTPS traffic from thousands of external users. The solution must distribute the traffic across the web servers on AWS and the web servers in the on-premises data center. Regardless of the location of the web servers, HTTPS requests must go to the same web server throughout the entire session.

Which solution will meet these requirements?

  1. Create a Network Load Balancer (NLB) in the production VPC. Create a target group. Specify ip as the target type. Register the EC2 instances and the on-premises servers with the target group Enable connection draining on the NLB
  2. Create an Application Load Balancer (ALB) in the production VPC. Create a target group Specify ip as the target type. Register the EC2 instances and the on-premises servers with the target group. Enable application-based session affinity (sticky sessions) on the AL
  3. Create a Network Load Balancer (NLB) in the production VP Create a target group. Specify instance as the target type. Register the EC2 instances and the on-premises servers with the target group. Enable session affinity (sticky sessions) on the NLB.
  4. Create an Application Load Balancer (ALB) in the production VPC. Create a target group. Specify instance as the target type Register the EC2 instances and the on-premises servers with the target group Enable application-based session affinity (sticky sessions) on the ALB.

Answer(s): C



A company has an AWS environment that includes multiple VPCs that are connected by a transit gateway. The company has decided to use AWS Site-to-Site VPN to establish connectivity between its on-premises network and its AWS environment.

The company does not have a static public IP address for its on-premises network. A network engineer must implement a solution to initiate the VPN connection on the AWS side of the connection for traffic from the AWS environment to the on-premises network.

Which combination of steps should the network engineer take to establish VPN connectivity between the transit gateway and the on-premises network? (Choose three.)

  1. Configure the Site-to-Site VPN tunnel options to use Internet Key Exchange version 1 (IKEv1).
  2. Configure the Site-to-Site VPN tunnel options to use Internet Key Exchange version 2 (IKEv2).
  3. Use a private certificate authority (CA) from AWS Private Certificate Authority to create a certificate.
  4. Use a public certificate authority (CA) from AWS Private Certificate Authority to create a certificate.
  5. Create a customer gateway. Specify the current dynamic IP address of the customer gateway device's external interface.
  6. Create a customer gateway without specifying the IP address of the customer gateway device.

Answer(s): B,C,F



A company's AWS environment has two VPCs. VPC A has a CIDR block of 192.168.0.0/16. VPC B has a CIDR block of 10.0.0.0/16. Each VPC is deployed in a separate AWS Region. The company has remote users who work outside the company's offices. These users need to connect to an application that is running in the VPCs.

Traffic to and from the VPCs over the internet must be encrypted. A network engineer must set up connectivity between the remote users and the VPCs.

Which combination of steps should the network engineer take to meet these requirements with the LEAST management overhead? (Choose three.)

  1. Establish an AWS Site-to-Site VPN connection between VPC A and VPC B.
  2. Establish a VPC peering connection between VPC A and VPC
  3. Create an AWS Client VPN endpoint in VPC A and VPC B Add an authorization rule to grant access to VPC A and VPC B.
  4. Create an AWS Client VPN endpoint in VPC A Add an authorization rule to grant access to VPC A and VPC
  6. Add a route to the AWS Client VPN endpoint's route table to direct traffic to VPC B.
  7. Add a route to the AWS Client VPN endpoint's route table to direct traffic to VPC A.

Answer(s): B,D,E



A company uses Amazon Route 53 to register a public domain, example.com, in an AWS account. A central services group manages the account. The company wants to create a subdomain, test.example.com, in another AWS account to offer name services for Amazon EC2 instances that are hosted in the account. The company does not want to migrate the parent domain to the subdomain account.

A network engineer creates a new Route 53 hosted zone for the subdomain in the second account.

Which combination of steps must the network engineer take to complete the task? (Choose two.)

  1. Add records for the hosts of the new subdomain to the new Route 53 hosted zone.
  2. Update the DNS service for the parent domain by adding name server (NS) records for the subdomain.
  3. Update the DNS service for the subdomain by adding name server (NS) records for the parent domain.
  4. Create an alias record from the parent domain that points to the hosted zone for the subdomain in the second account.
  5. Add a start of authority (SOA) record in the parent domain for the subdomain.

Answer(s): A,B



An IoT company collects data from thousands of sensors that are deployed in the Unites States and South Asia. The sensors use a proprietary communication protocol that is built on UDP to send the data to a fleet of Amazon EC2 instances. The instances are in an Auto Scaling group and run behind a Network Load Balancer (NLB). The instances, Auto Scaling group, and NLB are deployed in the us-west-2 Region.

Occasionally, the data from the sensors in South Asia gets lost in transit over the internet and does not reach the EC2 instances.

Which solutions will resolve this issue? (Choose two.)

  1. Use AWS Global Accelerator with the existing NLB.
  2. Create an Amazon CloudFront distribution. Specify the existing NLB as the origin.
  3. Create a second deployment of the EC2 instances and the NLB in the ap-south-1 Region. Use an Amazon Route 53 latency routing policy to resolve to the Region that provides the least latency.
  4. Create a second deployment of the EC2 instances and the NLB in the ap-south-1 Region. Use an Amazon Route 53 failover routing policy to resolve to an alternate Region in case packets are dropped.
  5. Turn on enhanced networking on the EC2 instances by using the most recent Elastic Network Adapter (ENA) drivers.

Answer(s): A,C



A company has an application that runs on a fleet of Amazon EC2 instances. A new company regulation mandates that all network traffic to and from the EC2 instances must be sent to a centralized third-party EC2 appliance for content inspection.

Which solution will meet these requirements?

  1. Configure VPC flow logs on each EC2 network interface. Publish the flow logs to an Amazon S3 bucket.
    Create a third-party EC2 appliance to acquire flow logs from the S3 bucket. Log in to the appliance to monitor network content.
  2. Create a third-party EC2 appliance in an Auto Scaling group fronted by a Network Load Balancer (NLB).
    Configure a mirror session. Specify the NLB as the mirror target. Specify a mirror filter to capture inbound and outbound traffic. For the source of the mirror session, specify the EC2 elastic network interfaces for all the instances that host the application.
  3. Configure a mirror session. Specify an Amazon Kinesis Data Firehose delivery stream as the mirror target.
    Specify a mirror filter to capture inbound and outbound traffic. For the source of the mirror session, specify the EC2 elastic network interfaces for all the instances that host the application. Create a third-party EC2 appliance. Send all traffic to the appliance through the Kinesis Data Firehose delivery stream for content inspection.
  4. Configure VPC flow logs on each EC2 network interface. Send the logs to Amazon CloudWatch. Create a third-party EC2 appliance. Configure a CloudWatch filter to send the flow logs to Amazon Kinesis Data Firehose to load the logs into the appliance.

Answer(s): B



A company has two AWS Direct Connect links. One Direct Connect link terminates in the us-east-1 Region, and the other Direct Connect link terminates in the af-south-1 Region. The company is using BGP to exchange routes with AWS.

How should a network engineer configure BGP to ensure that af-south-1 is used as a secondary link to AWS?

  1. On the Direct Connect link to us-east-1, configure BGP peering to use community tag 7224:7100



    On the Direct Connect link to af-south-1, configure BGP peering to use community tag 7224:7300



    On the Direct Connect BGP peer to us-east-1, set the local preference value to 200



    On the Direct Connect BGP peer to af-south-1, set the local preference value to 50
  2. On the Direct Connect link to us-east-1, configure BGP peering to use community tag 7224:7300



    On the Direct Connect link to af-south-1, configure BGP peering to use community tag 7224:7100



    On the Direct Connect BGP peer to us-east-1, set the local preference value to 200



    On the Direct Connect BGP peer to af-south-1, set the local preference value to 50
  3. On the Direct Connect link to us-east-1, configure BGP peering to use community tag 7224:7100



    On the Direct Connect link to af-south-1, configure BGP peering to use community tag 7224:7300



    On the Direct Connect BGP peer to us-east-1, set the local preference value to 50



    On the Direct Connect BGP peer to af-south-1, set the local preference value to 200
  4. On the Direct Connect link to us-east-1, configure BGP peering to use community tag 7224:7300



    On the Direct Connect link to af-south-1, configure BGP peering to use community tag 7224:7100



    On the Direct Connect BGP peer to us-east-1, set the local preference value to 50



    On the Direct Connect BGP peer to af-south-1, set the local preference value to 200

Answer(s): B



  PDF
Viewing page 19 of 38
Viewing questions 145 - 152 out of 306 questions


Post your Comments and Discuss Amazon ANS-C01 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!