Free Practice Amazon ANS-C01 Exam Questions 2025

Stay ahead with 100% Free AWS Certified Advanced Networking Specialty ANS-C01 Dumps Practice Questions

Page: 1 / 47

Total 232 Questions | Updated On: Mar 25, 2025

Add To Cart

Question 1

A company has established an AWS Direct Connect connection between its customer gateway at its on-premises data center and a virtual private gateway m the AWS Cloud The BGP routing protocol configuration includes the Autonomous System Number {ASN) of 7224 on the AWS end of the connection and the BGP ASN of 65004 on the company end of the connection

The company's IT administrators report that servers that run at the on-premises data center are not able to communicate with the company's web application that runs on a fleet of Amazon EC2 Instances A network engineer performs initial troubleshooting The network engineer finds that the private VIF is operational and that there is a fully established BGP peering session However, the company still cannot route traffic over the private VIF

Which of the following is a possible cause of this connectivity issue?

A : Firewall or ACL rules are blocking TCP pod 179 or are blocking high-numbered ephemeral TCP pons

B : The provider is advertising 50 prefixes for private VIFs

C : VPC route tables am lacking prefixes that point to the virtual private gateway to which the private VIF is connected

D : Peer IP addresses for both sides of the BGP peering session are not configured correctly.

Answer: C

Question 2

A company is deploying a non-web application on an AWS load balancer. All targets are servers located on-premises that can be accessed by using AWS Direct Connect. The company wants to ensure that the source IP addresses of clients connecting to the application are passed all the way to the end server.

How can this requirement be achieved?

A : Use a Network Load Balancer to automatically preserve the source IP address.

B : Use a Network Load Balancer and enable the X-Forwarded-For attribute.

C : Use a Network Load Balancer and enable the ProxyProtocol v2 attribute.

D : Use an Application Load Balancer to automatically preserve the source IP address in the X-Forwarded-For header.

Answer: C

Question 3

A company deployed its production Amazon VPC using CIDR block 33.16.0.0/16. The company has nearly depleted its addresses and now needs to extend the VPC network.

Which CIDR blocks meet the company's requirement to extend the VPC network with a secondary CIDR? (Choose two.)

A : 33.17.0.0/16

B : 172.16.0.0/18

C : 100.70.0.0/17

D : 192.168.1.0/24

E : 10.0.0.0/8

Answer: A,C

Question 4

A developer has configured a private hosted zone using Route 53. The developer needs to configure health checks for record sets within the private hosted zone that are associated with EC2 instances.

How can the developer build a solution to address the given use-case?

A : Set up a Route 53 health check that monitors an SNS topic which in turn notifies a CloudWatch alarm when the EC2 StatusCheckFailed metric fails

B : Set up a CloudWatch metric that checks the status of the EC2 StatusCheckFailed metric and then configure a health check that monitors the status of the metric

C : Set up a Route 53 health check to a private IP associated with the instances inside the VPC to be checked

D : Set up a CloudWatch metric that checks the status of the EC2 StatusCheckFailed metric, add an alarm to the metric, and then configure a health check that monitors the state of the alarm

Answer: D

Question 5

You deploy an Amazon EC2 instance that runs a web server into a subnet in a VPC. An Internet gateway is attached, and the main route table has a default route (0.0.0.0/0) configured with a target of the Internet gateway.

The instance has a security group configured to allow as follows:

Protocol: TCP

Port: 80 inbound, nothing outbound

The Network ACL for the subnet is configured to allow as follows:

Protocol: TCP

Port: 80 inbound, nothing outbound

When you try to browse to the web server, you receive no response.

Which additional step should you take to receive a successful response?

A : Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80

B : Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535

C : Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 80

D : Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 1024-65535

Answer: D

Page: 1 / 47

Total 232 Questions | Updated On: Mar 25, 2025

Add To Cart