Home
Amazon
ANS-C01: AWS Certified Advanced Networking - Specialty

Amazon ANS-C01 Exam Questions

Name: Amazon ANS-C01 Exam
Brand: Pass4Success
SKU: ANS-C01
Price: 69.00 USD
Availability: InStock
Rating: 4.7 (188 reviews)

Exam Name: Amazon AWS Certified Advanced Networking - Specialty Exam

Exam Code: ANS-C01

Related Certification(s): Amazon Specialty Certification

Certification Provider: Amazon

Actual Exam Duration: 170 Minutes

Number of ANS-C01 practice questions in our database: 291 (updated: Oct. 27, 2026)

Disscuss Amazon ANS-C01 Topics, Questions or Ask Anything Related

0/2000 characters

Submit Cancel

Hamza Ahmed

15 days ago

You can get log analysis problems where they give VPC Flow Log entries and CloudWatch graphs and expect you to identify the traffic bottleneck or misrouting. Practice interpreting flow log fields, CloudWatch metrics and Route 53 health checks so you can correlate symptoms to root causes a coworker passed after concentrating on those operational playbooks.

upvoted 0 times

...

Ana Popov

23 days ago

I passed ANS C01 recently, and the exam leaned heavily on hybrid connectivity tradeoffs, especially Direct Connect redundancy, BGP behavior, and failover scenarios. What helped most was working through real configs and then explaining the failure mode in plain language.

upvoted 0 times

...

Rajesh Reddy

2 months ago

There were implementation questions that presented a Direct Connect plus VPN failover scenario and asked which BGP attributes and route propagation settings to apply. Focus on BGP basics, route priorities, Direct Connect virtual interfaces and hands-on CLI examples I managed to pass by practicing real config snippets and labs.

upvoted 0 times

...

Jian Nguyen

2 months ago

I passed the AWS Certified Advanced Networking Specialty ANS C01, and the hardest part was translating vague design prompts into concrete VPC, TGW, and routing decisions, so I practiced drawing architectures from memory. The best prep was reviewing why a route propagates or does not and validating it with small labs.

upvoted 0 times

...

Abdullah Baig

3 months ago

My exam included architecture scenarios asking me to pick between Transit Gateway, VPC peering, or a hub and spoke topology based on scale, route limits and cost tradeoffs. Study TGW route propagation, CIDR planning and failure domains to justify a design I passed and thanks Pass4Success for providing good collection of exam questions for preparation in short time.

upvoted 0 times

...

Free Amazon ANS-C01 Exam Actual Questions

Note: Premium Questions for ANS-C01 were last updated On Oct. 27, 2026 (see below)

Question #1

A company has developed a new web application on AWS. The application runs on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate behind an Application Load Balancer (ALB) in the us-east-1 Region. The application uses Amazon Route 53 to host the DNS records for the domain. The content that is served from the website is mostly static images and files that are not updated frequently. Most of the traffic to the website from end users will originate from the United States. Some traffic will originate from Canada and Europe.

A network engineer needs to design a solution that will reduce latency for end users at the lowest cost. The solution also must ensure that all traffic is encrypted in transit until the traffic reaches the ALB.

Which solution will meet these requirements?

AConfigure the ALB to use an AWS Global Accelerator accelerator In us-east-1. Create a secure HTTPS listener. Create an alias record in Amazon Route 53 for the custom domain name. Configure the alias record to route to the DNS name that is assigned to the accelerator for the ALB.

BConfigure the ALB to use a secure HTTPS listener Create an Amazon CloudFront distribution. Set the origin domain name to point to the DNS record that is assigned to the ALB. Configure the CloudFront distribution to use an SSL certificate. Set all behaviors to force HTTPS. Create an alias record in Amazon Route 53 for the custom domain name. Configure the alias record to route to the DNS name that is assigned to the ALB.

CConfigure the ALB to use a secure HTTPS listener. Create an Amazon CloudFront distribution. Set the origin domain name to point to the DNS record that is assigned to the ALB. Configure the CloudFront distribution to use an SSL certificate and redirect HTTP to HTTPS. Create an alias record in Amazon Route 53 for the custom domain name. Configure the alias record to route to the CloudFront distribution.

DConfigure the ALB to use an AWS Global Accelerator accelerator in us-east-1. Create a secure HTTPS listener. Create a second application stack on Amazon ECS on Fargate in the eu-west-1 Region Create another secure HTTPS listener. Create an alias record in Amazon Route 53 for the custom domain name. Configure the alias record to use a latency-based routing policy to route to the DNS name that is assigned to the accelerator for the ALBs.

Reveal Solution Hide Solution

Correct Answer: C

Question #2

A consulting company manages AWS accounts for its customers. One of the company's customers needs to add intrusion prevention for its environment without having to re-architect the environment. The customer's environment includes five VPCs in two AWS Regions in the United States. VPC-to-VPC connectivity is achieved through VPC peering. The customer does not plan to increase the number of VPCs within the next 2 years. The solution must accommodate unencrypted traffic.

Which solution will meet these requirements?

AConfigure VPC security groups and network ACLs.

BUse an AWS Network Firewall centralized deployment model in each VPC.

CUse an AWS Network Firewall distributed deployment model in each VPC.

DDeploy AWS Shield in each VPC.

Reveal Solution Hide Solution

Correct Answer: C

Question #3

A company uses a hybrid architecture and has an AWS Direct Connect connection between its on-premises data center and AWS. The company has production applications that run in the on-premises data center. The company also has production applications that run in a VPC. The applications that run in the on-premises data center need to communicate with the applications that run in the VPC. The company is using corp.example.com as the domain name for the on-premises resources and is using an Amazon Route 53 private hosted zone for aws.example.com to host the VPC resources.

The company is using an open-source recursive DNS resolver in a VPC subnet and is using a DNS resolver in the on-premises data center. The company's on-premises DNS resolver has a forwarder that directs requests for the aws.example.com domain name to the DNS resolver in the VPC. The DNS resolver in the VPC has a forwarder that directs requests for the corp.example.com domain name to the DNS resolver in the on-premises data center. The company has deckled to replace the open-source recursive DNS resolver with Amazon Route 53 Resolver endpoints.

Which combination of steps should a network engineer take to make this replacement? (Choose three.)

ACreate a Route 53 Resolver rule to forward aws.example.com domain queries to the IP addresses of the outbound endpoint.

BConfigure the on-premises DNS resolver to forward aws.example.com domain queries to the IP addresses of the inbound endpoint.

CCreate a Route 53 Resolver inbound endpoint and a Route 53 Resolver outbound endpoint.

DCreate a Route 53 Resolver rule to forward aws.example.com domain queries to the IP addresses of the inbound endpoint.

ECreate a Route 53 Resolver rule to forward corp.example.com domain queries to the IP address of the on-premises DNS resolver.

FConfigure the on-premises DNS resolver to forward aws.example.com queries to the IP addresses of the outbound endpoint.

Reveal Solution Hide Solution

Correct Answer: B, C, E

To replace the open-source recursive DNS resolver with Amazon Route 53 Resolver endpoints in a hybrid architecture where on-premises applications need to communicate with applications running in a VPC, a network engineer should take the following steps:

Create a Route 53 Resolver inbound endpoint and a Route 53 Resolver outbound endpoint. (Option C)

Configure the on-premises DNS resolver to forward aws.example.com domain queries to the IP addresses of the inbound endpoint. (Option B)

Create a Route 53 Resolver rule to forward corp.example.com domain queries to the IP address of the on-premises DNS resolver. (Option E)

These steps will allow for seamless replacement of the open-source recursive DNS resolver with Amazon Route 53 Resolver endpoints and enable communication between on-premises and VPC applications.

Question #4

A company deploys a new web application on Amazon EC2 instances. The application runs in private subnets in three Availability Zones behind an Application Load Balancer (ALB). Security auditors require encryption of all connections. The company uses Amazon Route 53 for DNS and uses AWS Certificate Manager (ACM) to automate SSL/TLS certificate provisioning. SSL/TLS connections are terminated on the ALB.

The company tests the application with a single EC2 instance and does not observe any problems. However, after production deployment, users report that they can log in but that they cannot use the application. Every new web request restarts the login process.

What should a network engineer do to resolve this issue?

AModify the ALB listener configuration. Edit the rule that forwards traffic to the target group. Change the rule to enable group-level stickiness. Set the duration to the maximum application session length.

BReplace the ALB with a Network Load Balancer. Create a TLS listener. Create a new target group with the protocol type set to TLS Register the EC2 instances. Modify the target group configuration by enabling the stickiness attribute.

CModify the ALB target group configuration by enabling the stickiness attribute. Use an application-based cookie. Set the duration to the maximum application session length.

DRemove the ALB. Create an Amazon Route 53 rule with a failover routing policy for the application name. Configure ACM to issue certificates for each EC2 instance.

Reveal Solution Hide Solution

Correct Answer: C

Question #5

A company is using AWS Cloud WAN with one edge location in the us-east-1 Region and one edge location in the us-west-1 Region. A shared services segment exists at both edge locations. Each shared services segment has a VPC attachment to each inspection VPC in each Region. The inspection VPCs inspect traffic from a WAN by using AWS Network Firewall.

The company creates a new segment for a new business unit (BU) in the us-east-1 edge location. The new BU has three VPCs that are attached to the new BU segment. To comply with regulations, the BU VPCs must not communicate with each other. All internet-bound traffic must be inspected in the inspection VPC.

The company updates VPC route tables so any traffic that is bound for internet goes to the AWS Cloud WAN core network.

The company plans to add more VPCs for the new BU in the future. All future VPCs must comply with regulations.

Which solution will meet these requirements in the MOST operationally efficient way? (Choose two.)

AUpdate the network policy to share the shared services segment with the BU segment.

BCreate a network policy to share the inspection service segment with the BU segment.

CSet the isolate-attachments field to True for the BU segment.

DSet the isolate-attachments field to False for the BU segment.

EUpdate the network policy to add static routes for the BU segment. Configure the shared services segment to route traffic related to VPC CIDR blocks to each respective VPC attachment.

Reveal Solution Hide Solution

Correct Answer: B, C

Explore Other Amazon Exams

Unlock Premium ANS-C01 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Unlock all ANS-C01 features

Just for $59 you get

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Login First To Buy This Product

Password

Questions and Answers Demo

Web-Based Practice Test Demo

Start Demo