Free Practice Amazon ANS-C01 Exam Questions 2025

Stay ahead with 100% Free AWS Certified Advanced Networking Specialty ANS-C01 Dumps Practice Questions

Page: 1 / 47

Total 232 Questions | Updated On: Mar 25, 2025

Add To Cart

Question 1

An organization runs a consumer-facing website on AWS. The Amazon EC2-based web fleet is load balanced using the AWS Application Load Balancer, Amazon Route 53 is used to provide the public DNS services.

The following URLs need to server content to end users:

test.example.com

web.example.com

example.com

Based on this information, what combination of services must be used to meet the requirement? (Select two.)

A : Path condition in ALB listener to route example.com to appropriate target groups.

B : Host condition in ALB listener to route *.example.com to appropriate target groups.

C : Host condition a ALB listener to route example.com to appropriate target groups.

D : Path condition in ALB listener to route *.example.com to appropriate target groups.

E : Host condition in ALB listener to route $$$$.example.com to appropriate target groups.

Answer: B,C

Question 2

A developer has configured a private hosted zone using Route 53. The developer needs to configure health checks for record sets within the private hosted zone that are associated with EC2 instances.

How can the developer build a solution to address the given use-case?

A : Set up a Route 53 health check that monitors an SNS topic which in turn notifies a CloudWatch alarm when the EC2 StatusCheckFailed metric fails

B : Set up a CloudWatch metric that checks the status of the EC2 StatusCheckFailed metric and then configure a health check that monitors the status of the metric

C : Set up a Route 53 health check to a private IP associated with the instances inside the VPC to be checked

D : Set up a CloudWatch metric that checks the status of the EC2 StatusCheckFailed metric, add an alarm to the metric, and then configure a health check that monitors the state of the alarm

Answer: D

Question 3

An online retail organization runs its e-commerce website on AWS. The Amazon EC2 instances running the application are fronted by an Application Load Balancer (ALB). Amazon Route 53 provides public DNS services. Different URLs (mobile.shopping.com, web.shopping.com, api.shopping.com) will serve the required content to the end-users.

Which combination of services must be used to serve the content correctly to the end-users? (Select two)

A : Use Path conditions in ALB listener to route *.shopping.com to appropriate target groups

B : Use Host conditions in ALB listener to route *.shopping.com to appropriate target groups

C : Use Host conditions in ALB listener to route shopping.com to appropriate target groups

D : Use Host conditions in ALB listener to route $$$$.shopping.com to appropriate target groups

E : Use Path component of Redirect actions in ALB listener configuration to route shopping.com to appropriate target groups

Answer: B,C

Question 4

You deploy an Amazon EC2 instance that runs a web server into a subnet in a VPC. An Internet gateway is attached, and the main route table has a default route (0.0.0.0/0) configured with a target of the Internet gateway.

The instance has a security group configured to allow as follows:

Protocol: TCP

Port: 80 inbound, nothing outbound

The Network ACL for the subnet is configured to allow as follows:

Protocol: TCP

Port: 80 inbound, nothing outbound

When you try to browse to the web server, you receive no response.

Which additional step should you take to receive a successful response?

A : Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80

B : Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535

C : Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 80

D : Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 1024-65535

Answer: D

Question 5

The security team in its report has flagged malicious activity from 100 random IP addresses for malicious activity. As a network security engineer, you have to ensure the safety and accessibility of the AWS resources.

Which of the following actions would you suggest to ensure safety from such types of threats?

A : Use Route Table propagation to pass the data of malicious IP addresses to the network routers and block them using WAF

B : Use inbound Network ACL rules of the VPC to block the IP addresses

C : Use AWS WAF rate-based rule capability to block the IP addresses

D : Use inbound security group rules of the VPC to block the IP addresses

Answer: C

Page: 1 / 47

Total 232 Questions | Updated On: Mar 25, 2025

Add To Cart