Free Practice Amazon ANS-C01 Exam Questions 2025

Stay ahead with 100% Free AWS Certified Advanced Networking Specialty ANS-C01 Dumps Practice Questions

Page: 1 / 47

Total 232 Questions | Updated On: Apr 24, 2025

Add To Cart

Question 1

A company wants to enforce a compliance requirement that its Amazon EC2 instances use only on-premises DNS servers tor name resolution Outbound DNS requests lo all other name servers must be denied. A network engineer configures the following set of outbound rules for a security group.

Other-Image-27ab13157-f384-454f-8031-3b5776e261be

The network engineer discovers that the EC2 instances are still able to resolve DNS requests by using Amazon DNS servers inside the VPC Why is the solution tailing to meet the compliance requirement9

A : The security group cannot filter outbound traffic to the Amazon DNS servers

B : The security group must have inbound rules to prevent DNS requests from coming back to EC2 instances.

C : The EC2 instances are using the HTTPS port to send DNS queries to Amazon DNS servers

D : The security group cannot filter outbound traffic to destinations within the same VPC

Answer: A

Question 2

You deploy an Amazon EC2 instance that runs a web server into a subnet in a VPC. An Internet gateway is attached, and the main route table has a default route (0.0.0.0/0) configured with a target of the Internet gateway.

The instance has a security group configured to allow as follows:

Protocol: TCP

Port: 80 inbound, nothing outbound

The Network ACL for the subnet is configured to allow as follows:

Protocol: TCP

Port: 80 inbound, nothing outbound

When you try to browse to the web server, you receive no response.

Which additional step should you take to receive a successful response?

A : Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80

B : Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535

C : Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 80

D : Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 1024-65535

Answer: D

Question 3

The security team in its report has flagged malicious activity from 100 random IP addresses for malicious activity. As a network security engineer, you have to ensure the safety and accessibility of the AWS resources.

Which of the following actions would you suggest to ensure safety from such types of threats?

A : Use Route Table propagation to pass the data of malicious IP addresses to the network routers and block them using WAF

B : Use inbound Network ACL rules of the VPC to block the IP addresses

C : Use AWS WAF rate-based rule capability to block the IP addresses

D : Use inbound security group rules of the VPC to block the IP addresses

Answer: C

Question 4

A company runs a large-scale application on a feel of Amazon EC2 instances that ate distributed across several VPCs A Network Load Balancer (NLB) in a separate VPC routes traffic to the EC2 instances The NLB's VPC is peered to all the application VPCs

The application must process millions of requests each minute during times of peak utilization Users are reporting that the connections to the application are failing during peak times Monitoring shows an increase in port allocation errors on the NLB.

Which action will solve this issue with the LEAST change to the architecture?

A : Increase the number of EC2 instances in the target group

B : Create an Application Load Balancer for the target group

C : Add a new target group to the same NLB listener

D : Change the target group type to 'instance'

Answer: C

Question 5

A company provisions an AWS Direct Connect connection to permit access to Amazon EC2 resources in several Amazon VPCs and to data stored in private Amazon S3 buckets. The Network Engineer needs to configure the company's on-premises router for this Direct Connect connection.

Which of the following actions will require the LEAST amount of configuration overhead on the customer router?

A : Configure private virtual interfaces for the VPC resources and for Amazon S3.

B : Configure private virtual interfaces for the VPC resources and a public virtual interface for Amazon S3.

C : Configure a private virtual interface to a Direct Connect gateway for the VPC resources and for Amazon S3

D : Configure a private virtual interface to a Direct Connect gateway for the VPC resources and a public virtual interface for Amazon S3.

Answer: A

Page: 1 / 47

Total 232 Questions | Updated On: Apr 24, 2025

Add To Cart