AWS Certified Advanced Networking - Specialty ANS-C01 Exam Discussions & Posts
SubnettingNight
on: May 15, 2026
Failed twice but passed on the third try using brain dumps adn real exam questions. The AI Assistant helped with areas that were very hard.
Malaysia
AI Explanation - verified by User8408
on: May 15, 2026
Question 6:
Here’s why Question 6 is best answered with C: Use an Ajax handler attached to the input control that changes the value, not to the options themselves.
- The optimal approach is to add an
apex:actionSupport inside the <apex:selectList>. This listens for the change event and can re-render the accounts table automatically.
- Why not inside
<apex:selectOptions>? Options don’t emit events on change; the input control (the select) does. The event should be attached to the select, not the options.
- Why not
apex:actionFunction? It’s possible but more verbose; actionSupport is the standard, simpler way to do Ajax updates on user interaction.
- You’d typically specify something like:
event="onchange" rerender="accountsTable" action="{!updateAccounts}".
Example:
<apex:selectList value="{!selectedIndustry}" id="industry"> <apex:selectOptions value="{!industries}"/> <apex:actionSupport event="onchange" rerender="accountsTable" action="{!updateAccounts}"/></apex:selectList>
So the correct choice is: Add an apex:actionSupport within the <apex:selectList>.
Aldie, United States
AI Explanation - verified by User8408
on: May 15, 2026
Question 4:
Answer: D — Storage Tab.
Why:
- The
Storage tab in the Salesforce Lightning Inspector lets you view client-side caches used by Lightning components (e.g., LocalStorage, SessionStorage, and component data caches). This is where stale data can live.
- By inspecting the stored values and their timestamps, you can determine if components are serving cached data instead of data from the server.
How to use:
- Open the Lightning Inspector on the Lightning Page.
- Go to the
Storage tab and review keys/data related to the components that cache reference data.
- Compare cached values with the latest server data. If data is stale, you can clear storage or force a refresh to validate behavior.
Why not the others:
- Actions Tab shows user/component actions, not cached data.
- Event Log Tab records events, not cached data storage.
- Transactions Tab shows server calls and performance, but not the client-side caches driving stale UI.
In short, use the Storage tab to diagnose caching-related data freshness issues on a Lightning Page.
Aldie, United States
AI Explanation - verified by User8408
on: May 15, 2026
Question 3:
The correct answer is D: Named Credential.
Why:
- A Named Credential stores both the endpoint URL and the authentication method (including OAuth). It lets you manage credentials outside of your code.
- With Named Credentials, you can switch to a different vendor (or provider) by updating the Named Credential record (change URL, OAuth provider, etc.) without touching or redeploying Apex code.
How this helps:
- Your callouts can reference the named credential (e.g.,
callout:My_Named_Credential), so the same code works with any provider configured in that credential.
- It handles token management and supports OAuth flows, aligning with “no code changes for auth” requirement.
Why not the others:
- Custom Metadata / Custom Setting (List): good for config but not for storing credentials or OAuth flows.
- Dynamic Endpoint: only changes the URL at runtime but doesn’t solve credential management or OAuth handling as robustly as Named Credentials.
In short, Named Credential centralizes and decouples authentication and endpoint details from your code, enabling vendor switches without code changes.
Aldie, United States
Eniola
on: May 15, 2026
studying AI900, this has really help me to prepare for my exam
Lagos, Nigeria
AI Explanation - verified by User1370
on: May 15, 2026
Question 1:
Here’s the idea behind question 1.
- Topic: Group-based licensing in Azure AD. An Office 365 license (like Office 365 Enterprise E5) is a user license, but you can apply it to groups so all current and future members get the license automatically.
- Key rule: Licenses can be assigned to groups that are of type Security group. Group types like Distribution groups or other non-security groups are not eligible for direct license assignment.
- What to check in the scenario:
- If each group (Group1–Group5) is a Security group, then you can assign the E5 license directly to each of them.
- If any group is not a security group, that group cannot receive the license directly.
- Why the given answer (B: Group1, Group2, Group3, Group4, and Group5) makes sense: If the table shows all five groups as security groups, the license can be assigned to all of them, so the correct choice is “Group1, Group2, Group3, Group4, and Group5.”
Bottom line: License-to-group works for security groups only; your determination hinges on each group’s type in the table. If all are security groups, you can license all five.
Pune, India
AI Explanation - verified by User6897
on: May 15, 2026
Question 11:
Here’s how to understand Question 11.
- It’s a hot area about responsible AI: you’re asked to mark whether each statement is true.
Why: Transparency helps the team understand the data and algorithms used to train the model, the data transformations, the final model, and its assets. This supports reproducibility and trust.
Why: Data privacy and security are integral to AI systems. Data holders must protect data and ensure access doesn’t compromise individuals’ privacy.
Why: Inclusiveness means AI should consider diverse users and experiences; inclusive design helps address barriers and, where appropriate, use assistive tech to empower people with impairments.
Note: The bank’s given answers (Yes, No, No) appear inconsistent with the responsible-AI principles (transparency, privacy/security, inclusiveness). The Microsoft guidelines for Trusted AI align with all three statements being true. If you want, I can walk through why these principles matter for exams and how to spot them in questions.
Kolkata, India
AI Explanation - verified by User7730
on: May 15, 2026
Question 47:
Here’s the key reasoning for Question 47.
- Scenario: 1,000 iOS devices. 200 enrolled via Intune Company Portal, 800 enrolled via Apple ADE (supervised). Policy1 is an iOS software update policy to install iOS 15.5.
- How many devices will Policy1 update?
- 800 devices. Only supervised ADE devices are fully manageable for updates with Intune. The 200 non-ADE (Company Portal) devices aren’t covered by the same update policy scope here.
- What should you configure to ensure only iOS 15.5 is installed?
- Configure a Device restriction policy. Update policies can push a specific version, but they don’t prevent users from updating to other versions. A device restrictions profile hides or restricts software updates, ensuring only 15.5 is installable/visible.
- A compliance policy or a conditional access policy aren’t used to control which OS version is installed in this update scenario.
In short: answer is 800 devices will be updated, and you should use a Device restriction policy to lock the OS to 15.5.
Laval, Canada
AI Explanation - verified by User9660
on: May 15, 2026
Question 4:
Question 4 focuses on routing a Windows 10 P2S VPN client connected to Virtual Network A (VNetA) to reach resources in Virtual Network B (VNetB) via peering.
Key idea:
- Gateway transit lets a peered network use the gateway in the other network to reach on-prem or Internet.
- It does not automatically enable P2S traffic from a client connected to VNetA to reach VNetB’s resources.
Why the proposed solution doesn’t meet the goal:
- Enabling “Allow gateway transit” on VirtualNetworkA allows VNetB to use VNetA’s gateway for external connectivity, but it does not configure the routing needed for a P2S client (the Windows 10 workstation) connected to VNetA to access VNetB directly.
- To allow a P2S client in VNetA to reach VNetB, you typically need to configure the peering with remote gateway support (e.g., use remote gateways) so that traffic from the VPN client can be routed through the hub VNet's gateway to the other network.
Bottom line:
- Answer: No. Gateway transit alone does not ensure a Windows 10 P2S VPN client can reach VirtualNetworkB. You’d configure the peering to allow remote gateways (gateway usage across the peering) to achieve that.
Coimbatore, India
AI Explanation - verified by User8178
on: May 15, 2026
Question 6:
The correct answer is Mash-up (option C).
Reason: A mash-up is a web app that combines data or services from multiple sources into a single interface. XYZ’s site uses interactive features like maps/geolocation and links to external information sites (tourism board, hotels), which together illustrate combining external data sources into its own site. The other options don’t fit this integration concept as well.
Courtenay, Canada
AI Explanation - verified by harantruda
on: May 15, 2026
Question 230:
The correct option is D: cont1, cont2, share1, and share2.
Why:
- Azure Storage allows organization of content using both blob containers and Azure File shares.
- The planned changes include creating a second container cont2 in storage1, and there are existing/usable file shares (share1, share2) to organize content.
- The directive to “use directories where possible” applies inside both containers and shares, so you can structure data hierarchically inside each.
In short, you can organize content with both containers (cont1, cont2) and file shares (share1, share2), so all four can be used. If you’d like, I can map out how to structure directories inside each.
Prague, Czechia
AI Explanation - verified by User4928
on: May 15, 2026
Question 2:
Question 2 explanation:
- Correct approach (conceptually): Use both
- Add-AzVhd to upload the generalized VM’s VHD to a storage account.
- Add-AzImage to register a managed image from that VHD so it’s selectable when creating new VMs.
- If you have data disks to include, you might also use Add-AzImageDataDisk.
- Why the other options aren’t sufficient:
- Add-AzVM: creates a VM, not an image.
- Add-AzVhd alone only uploads the VHD; you still need to create an image with Add-AzImage.
- Add-AzImageDataDisk is for data disks, and depends on having an existing image.
- Note on the provided key: The exam answer shows only B, but in practice you typically perform both B and C to make the image available for future VM deployments.
Kanpur, India
AI Explanation - verified by User4928
on: May 15, 2026
Question 1:
Here’s a focused explanation of Question 1.
- Correct answer: A — Configure a SetupComplete.cmd batch file in
%windir%\setup\scripts.
- Why: SetupComplete.cmd runs automatically after Windows Setup has completed on a new VM. If you place your post-deployment steps (or call a PowerShell script from there) in this file, the tasks execute as part of the first boot for every new VM. This is a standard way to customize VMs right after deployment.
- Why the other options are less suitable:
- B Logon scripts: Only run when a user logs on, not ideal for first-run automation and can run multiple times for different users.
- C Startup scripts: Run at every startup and typically require domain context; not reliably tied to the initial VM provisioning.
- D Put scripts on a new VHD: Having scripts on a disk doesn’t auto-run them; you’d still need a mechanism to execute them.
In short, for automatic post-deployment configuration on new VMs, SetupComplete.cmd is the best fit among the given choices.
Kanpur, India
Ayushi
on: May 15, 2026
These questions are life saver. I cant spend a lot of money so these are my blessings.
Lucknow, India
Lamine
on: May 15, 2026
Helpfull dump
Franconville, France
AI Explanation - verified by User9393
on: May 15, 2026
Question 13:
Question 13 is about how ServiceNow evaluates Table Access Control (ACL) rules. The gist is that ACLs are checked from most specific to least specific.
- Most specific first: ACLs that apply to the exact table you’re accessing (e.g., the precise table name).
- Then ACLs on parent tables: if the table has inheritance, the ACLs defined on the parent/super tables can apply to the child.
- Finally, wildcard/any-table ACLs: ACLs defined with wildcards (for any table) apply last.
Within each category, the system generally favors the more specific match first. If no ACL matches the access request, access is denied by default.
Note: The text in this question appears garbled. The important concept to remember is: access checks start with the exact table, then consider parent tables, then fall back to wildcard definitions. If you’re unsure, the safest takeaway is “most specific to least specific” in the order: exact table ? parent table(s) ? any table wildcard.
Machilipatnam, India
AI Explanation - verified by User9393
on: May 15, 2026
Question 4:
- Correct answer: C: The Order field in the Variable form.
Explanation:
- In Service Catalog, the display order of the fields (variables) shown for a catalog item is controlled by the Order value on each Variable record. This determines the sequence in which variables appear on the item form.
- The Default Value field on the Catalog Item form affects initial values, not display order.
- The Sequence field on the Catalog Item form is not used to control variable display order.
- The Choice field on the Variable form relates to option values (for select lists), not ordering.
Machilipatnam, India
AI Explanation - verified by User4505
on: May 14, 2026
Question 4:
Question 4 asks which two tasks you can accomplish with Copilot in PowerPoint.
Why these are correct:
- B (Create a slide layout based on the content of your presentation): Copilot can automatically generate and apply layouts and design elements based on the content, helping structure slides quickly and consistently.
- D (Produce a summary slide based on the key points in your presentation): Copilot can analyze the deck to generate a high-level summary slide, including key points and potential action items, and tailor the summary for the audience.
Why the other options aren’t correct here:
- A (Insert a custom animation for a specific object on a slide): The described capabilities focus on content creation,
New York, United States
AI Explanation - verified by User7730
on: May 14, 2026
Question 43:
Here’s a targeted explanation of Question 43.
What Subscription Activation does
- It upgrades a Windows device from Windows 11 Pro to Windows 11 Enterprise using an Enterprise license (E5 in this case) without reimaging.
- Prerequisites for a device to use this upgrade:
- The device must be running Windows 11 Pro (not Home or Enterprise).
- The device must be Azure AD joined (Entra) or otherwise properly enrolled in Entra/Intune for license assignment.
- The device must have a valid Windows Enterprise E5 license assigned in Entra/Intune.
- The device must be online to activate the upgrade.
Why only Device1 in the question
- If the devices shown in the table differ in one or more prerequisites, only the ones meeting all three criteria above can use Subscription Activation.
- In the typical setup for this scenario, Device1 is the only device that is Pro edition, Azure AD joined, and licensed for Enterprise E5. The other devices are likely not Pro (or not Entra-joined, or don’t have the E5 license assigned), so they cannot use Subscription Activation.
How to verify (quick checks)
- Confirm OS edition on each device (must be Windows 11 Pro).
- Confirm Azure AD join state for each device.
- Confirm an Enterprise E5 license is assigned to the device/user.
- Ensure the device is online so the activation can complete.
If you want, share the device table details (edition, join state, and license) and I’ll walk through which ones qualify.
Laval, Canada
Community-Verified AI Explanation
on: May 14, 2026
Question 38:
Here’s why Question 38 picks those two settings.
- Box 1: Deployment mode ?
Self-deploying (Preview)
- Why: The requirement is to automatically enroll new devices and provision system apps without end-user authentication. Self-deploying mode enrolls devices without user interaction (the device isn’t associated with the user who’s signing in). Note: This mode requires Windows 10 version 1809 or later.
- Box 2: Apply device name template ? Yes, and use the
%SERIAL% macro
- Why: To include the hardware serial number in the computer name, enable a device name template and insert the %SERIAL% macro. This creates a unique, serial-number-based name. (Other macros exist as well, like %RAND%x%, but %SERIAL% is the one used for hardware serial.)
Laval, Canada
Community-Verified AI Explanation
on: May 14, 2026
what is NAC?
NAC stands for Network Access Control. It’s a security solution that enforces policy on every device trying to connect to the network.
- It checks device posture (e.g., antivirus status, patches, firewall) using either an agent or agentless method.
- Access is granted or restricted via mechanisms like
802.1X or MAC authentication, and noncompliant devices can be placed in a quarantine/remediation VLAN.
- Enforcement points are typically network switches and wireless controllers.
- Benefits include reducing risk from unmanaged or compromised devices, enforcing least-privilege access, and supporting secure guest access and device remediation.
Poughkeepsie, United States
Community-Verified AI Explanation
on: May 14, 2026
Question 12:
Here's why Question 12 is correct.
- Correct answer: A — Review the scope and project objectives.
Why this is right:
- When a project faces schedule and cost overruns and the client is unhappy with scope progress, the first step is to re-check the scope baseline and objectives to confirm what was agreed. This helps identify where the misalignment originates (requirements, deliverables, or scope clarity) before taking corrective actions.
- This sets the foundation for any change control or corrective actions and helps avoid taking premature or counterproductive steps.
Why the other options are weaker as first steps:
- B (Enforce penalties) is punitive and could damage relationships; it doesn’t address root cause.
- C (Take action to reduce cost overrun) may compromise scope or quality if done before understanding the root cause.
- D (Work with the client on scope completion) is important, but it presupposes a defined scope problem; you should first verify the scope and objectives before negotiating scope changes or completing it.
Lagos, Nigeria
Community-Verified AI Explanation
on: May 14, 2026
Question 1:
For Question 1, the best fit is: Use Secrets Manager with an AWS KMS customer-managed key, plus a resource-based policy to allow cross-account access.
Why this meets the requirements with the least management overhead:
- Secrets Manager handles secret storage, access, and encryption at rest/in transit automatically, reducing operational burden.
- Use a customer-managed KMS key to control encryption keys without relying on your own encryption code.
- Add a resource-based policy on the secret to allow access from other AWS accounts, simplifying cross-account sharing.
- Update the EC2 instance IAM role with permissions to access Secrets Manager and retrieve the secret (no need for custom infrastructure).
- Retrieve the secret with the decrypted value and use it to authenticate to the chat API.
Why not the other options (briefly):
- A (Parameter Store): viable, but Secrets Manager is often easier for cross-account sharing and secret management; Parameter Store requires its own cross-account policies and can incur more management when sharing across accounts.
- B, D, E introduce more components or are less suited for a simple cross-account secret retrieval path (additional services, permissions, or data flows).
In short: Secrets Manager with a cross-account resource policy gives secure, automatic encryption, simple cross-account access, and minimal ongoing maintenance.
São Mamede De Infesta, Portugal
Community-Verified AI Explanation
on: May 14, 2026
Question 4:
Vraag 4 uitleg:
- Antwoord: Nee. De voorgestelde oplossing geeft SaaS als model, maar dat klopt niet voor het uitrollen van Azure virtuele machines.
Waarom:
- SaaS levert software die volledig door de leverancier wordt beheerd; je hebt geen controle over OS of VM-configuratie.
- Voor het uitrollen en beheren van virtuele machines in Azure heb je IaaS (Infrastructure as a Service) nodig, zodat je zelf de VM’s, OS, patches en configuraties kunt beheren.
- PaaS biedt een beheerd platform voor applicaties, zonder trách over de onderliggende VM’s; dit is minder geschikt als het doel puur VM-implementatie is.
Kort samengevat: de juiste deployment-model voor VM’s is IaaS, niet SaaS. De vraagbank noemt SaaS, maar op basis van de examedoelstellingen is IaaS het correcte antwoord.
Utrecht, Netherlands
CiscoFan_J
on: May 11, 2026
Passed it by the skin of my teeth after grinding through brain dumps adn very hard questions. Real exam questions seemed familiar but stress was off the charts.
South Africa
self_taught_sam
on: May 06, 2026
Just cleared this exam after relying heavily on braindumps and the AI Assistant. It was very hard but the real exam questions were helpful.
Colombia
pingmaster
on: May 02, 2026
teh exam dumps covered a lot but the real exam questions were very hard to manage. I found this exam very challenging and quite stressful even with the brain dumps.
Indonesia
LabRatTech
on: April 28, 2026
Three weeks of prep and the exam dumps still didn't prepare me for the curveballs in this exam. Those real exam questions were very hard.
Netherlands
amara_itpro
on: April 28, 2026
The exam dumps were no match for the barrage of real exam questions thrown my way. What a challenging exam that required every ounce of focus I could muster.
India
james_tech_uk
on: April 28, 2026
Real exam questions caught me off guard in this challenging exam even after studying teh brain dumps.
Austria
kate_secplus
on: April 20, 2026
Took two attempts due to very hard braindumps and teh real exam questions caught me off guard. Be prepared that the exam dumps were only slightly useful compared to the actual test.
Canada
json_jock
on: April 18, 2026
Three weeks of prep for this exam and I was still unprepared so I turned to teh exam dumps. The exhaustion was real.
Chile
PassedIt2025
on: April 11, 2026
The exam was very hard and I underestimated it so I had to spend countless nights grinding through exam dumps to pass. The AI Assistant was helpful in clarifying the real exam questions.
Israel
NoSleepNoCert
on: April 09, 2026
That AI Assistant and some braindumps barely got me through this very hard exam. A challenging exam but at least the exam dumps helped.
United Kingdom
3rdTimeCharm_IT
on: April 03, 2026
Three weeks of preperation and this exam had so many questions that caught me off guard despite using various braindumps. The AI Assistant helped a bit but it was still a very hard experience.
United States
SkippedTheBook
on: March 25, 2026
Real exam questions caught me off guard with their depth and complexity. Spent weeks with dumps and braindumps but this exam was unexpectedly very hard.
South Africa
nina_sysadmin
on: March 25, 2026
Underestimated this exam and had to grind through countless braindumps to finally pass. The exam dumps covered a lot of very hard real exam questions so it was worth it.
Taiwan
uptime_unc
on: March 23, 2026
Finally done with the exm and it was very hard but the brain dumps helped a lot. The real exam questions were nothing like what I expected so it was a stressful experience.
Philippines
laid_off_leveled
on: March 22, 2026
After weeks with braindumps and teh AI Assistant I managed to pass this very hard exam on the second attempt. Not confident till the end but those real exam questions did help.
Kenya
sam_azure_guy
on: March 21, 2026
This exam was very hard and the only thing that got me through were the exam dumps. Couldn't have faced it again without the real exam questions in those dumps.
Brazil
RedHat_Rick
on: March 17, 2026
Took a lot of effort but the AI Assistant paired with braindumps got me throgh this very hard exam.
Sweden
mark_passed_aws
on: March 13, 2026
Spent weeks using braindumps and checking real exm questions but it was still very hard so the AI Assistant was a relief in the end.
Indonesia
CertifiedFinally
on: March 08, 2026
Never expected to pass since teh exam was very hard but the braindumps and the AI Assistant turned out helpful enough.
Greece
OneMoreRetake
on: March 06, 2026
Just cleared this very hard exam using braindumps yet the real exam questions caught me off guard. The AI Assistant was somewhat helpful but this was a challenging exam that took me two tries.
Belgium
graveyard_geek
on: March 06, 2026
The real exam questions were tougher than expected but the brain dumps helped me scrape a pass. Spent so many late nights stressing about this challenging exam.
India
4wscert
on: March 04, 2026
Two attempts needed for this challenging exam and those brain dumps were the only thing keeping me going. The AI Assistant helped in understanding the real exam questions but passing was still a grind.
Norway
tryhard_techie
on: March 03, 2026
Three weeks of relentless studying made this exam feel daunting despite the help of exam dumps. Real exam questions were a lifesaver in a very hard test.
France
chiara_devsec
on: March 03, 2026
Very hard and the exam dumps were the only thing that finally helped me pass it. Those real exam questions saved a lot of time.
United States
sam_azure_guy
on: February 25, 2026
Passed this exam after finding it very hard and ended up relying on braindumps. The real exam questions were tough even with the dumps.
Saudi Arabia
certgrind_2025
on: February 16, 2026
Took two attempts to pass this exam with brain dumps and the AI Assistant showing me just how very hard the real exam quetions were.
United States