Home
Amazon
ANS-C01: AWS Certified Advanced Networking - Specialty

Amazon ANS-C01 Exam Questions

Name: Amazon ANS-C01 Exam
Brand: Pass4Success
SKU: ANS-C01
Price: 69.00 USD
Availability: InStock
Rating: 4.7 (22 reviews)

Exam Name: Amazon AWS Certified Advanced Networking - Specialty Exam

Exam Code: ANS-C01

Related Certification(s): Amazon Specialty Certification

Certification Provider: Amazon

Actual Exam Duration: 170 Minutes

Number of ANS-C01 practice questions in our database: 291 (updated: Sep. 05, 2026)

Disscuss Amazon ANS-C01 Topics, Questions or Ask Anything Related

0/2000 characters

Submit Cancel

Rajesh Reddy

12 hours ago

There were implementation questions that presented a Direct Connect plus VPN failover scenario and asked which BGP attributes and route propagation settings to apply. Focus on BGP basics, route priorities, Direct Connect virtual interfaces and hands-on CLI examples I managed to pass by practicing real config snippets and labs.

upvoted 0 times

...

Jian Nguyen

9 days ago

I passed the AWS Certified Advanced Networking Specialty ANS C01, and the hardest part was translating vague design prompts into concrete VPC, TGW, and routing decisions, so I practiced drawing architectures from memory. The best prep was reviewing why a route propagates or does not and validating it with small labs.

upvoted 0 times

...

Abdullah Baig

1 month ago

My exam included architecture scenarios asking me to pick between Transit Gateway, VPC peering, or a hub and spoke topology based on scale, route limits and cost tradeoffs. Study TGW route propagation, CIDR planning and failure domains to justify a design I passed and thanks Pass4Success for providing good collection of exam questions for preparation in short time.

upvoted 0 times

...

Free Amazon ANS-C01 Exam Actual Questions

Note: Premium Questions for ANS-C01 were last updated On Sep. 05, 2026 (see below)

Question #1

A company deploys a new web application on Amazon EC2 instances. The application runs in private subnets in three Availability Zones behind an Application Load Balancer (ALB). Security auditors require encryption of all connections. The company uses Amazon Route 53 for DNS and uses AWS Certificate Manager (ACM) to automate SSL/TLS certificate provisioning. SSL/TLS connections are terminated on the ALB.

The company tests the application with a single EC2 instance and does not observe any problems. However, after production deployment, users report that they can log in but that they cannot use the application. Every new web request restarts the login process.

What should a network engineer do to resolve this issue?

AModify the ALB listener configuration. Edit the rule that forwards traffic to the target group. Change the rule to enable group-level stickiness. Set the duration to the maximum application session length.

BReplace the ALB with a Network Load Balancer. Create a TLS listener. Create a new target group with the protocol type set to TLS Register the EC2 instances. Modify the target group configuration by enabling the stickiness attribute.

CModify the ALB target group configuration by enabling the stickiness attribute. Use an application-based cookie. Set the duration to the maximum application session length.

DRemove the ALB. Create an Amazon Route 53 rule with a failover routing policy for the application name. Configure ACM to issue certificates for each EC2 instance.

Reveal Solution Hide Solution

Correct Answer: C

Question #2

A company is using AWS Cloud WAN with one edge location in the us-east-1 Region and one edge location in the us-west-1 Region. A shared services segment exists at both edge locations. Each shared services segment has a VPC attachment to each inspection VPC in each Region. The inspection VPCs inspect traffic from a WAN by using AWS Network Firewall.

The company creates a new segment for a new business unit (BU) in the us-east-1 edge location. The new BU has three VPCs that are attached to the new BU segment. To comply with regulations, the BU VPCs must not communicate with each other. All internet-bound traffic must be inspected in the inspection VPC.

The company updates VPC route tables so any traffic that is bound for internet goes to the AWS Cloud WAN core network.

The company plans to add more VPCs for the new BU in the future. All future VPCs must comply with regulations.

Which solution will meet these requirements in the MOST operationally efficient way? (Choose two.)

AUpdate the network policy to share the shared services segment with the BU segment.

BCreate a network policy to share the inspection service segment with the BU segment.

CSet the isolate-attachments field to True for the BU segment.

DSet the isolate-attachments field to False for the BU segment.

EUpdate the network policy to add static routes for the BU segment. Configure the shared services segment to route traffic related to VPC CIDR blocks to each respective VPC attachment.

Reveal Solution Hide Solution

Correct Answer: B, C

Question #3

A company has multiple AWS Site-to-Site VPN connections between an on-premises environment and multiple VPCs. The Site-to-Site VPN connections use virtual private gateways and are configured with IPv4 addresses. The company hosts several internal applications in the VPCs.

Application users have reported that the applications are performing slowly. A network engineer notices excessive latency in the network path that the VPN connections use. The network engineer needs to resolve the excessive latency.

Which solution will meet this requirement?

AUse AWS Global Accelerator to deploy an accelerator on the existing Site-to-Site VPN connections.

BDeploy a transit gateway and a new accelerated Site-to-Site VPN connection.

CReplace the existing Site-to-Site VPN connections with new Site-to-Site VPN connections that use IPv6.

DReplace the existing Site-to-Site VPN connections with AWS PrivateLink connections.

Reveal Solution Hide Solution

Correct Answer: B

Transit Gateway for Centralized Routing: A transit gateway centralizes the management and routing of multiple Site-to-Site VPN connections. It helps optimize network paths and reduce latency by avoiding the need for direct peering between each VPC and on-premises.

Accelerated Site-to-Site VPN: AWS accelerated Site-to-Site VPN connections use AWS Global Accelerator to reduce latency by leveraging the AWS global network to route traffic more efficiently. This significantly improves the performance of the applications.

Supports Existing IPv4 Configuration: Accelerated VPNs can work with IPv4 addresses, allowing the company to address latency without requiring migration to IPv6, which would introduce additional complexity.

Question #4

A company has two teams: Team A and Team B. Team A has VPCs that run in Account A. The team uses a transit gateway (TGW-A) to route traffic between workloads that run in the different VPCs. Similarly, Team has VPCs that run in Account B. Team uses a different transit gateway (TGW-B) to route traffic between workloads that run in the different VPCs.

The company's network team manages the routing for Team A and Team . The network team wants to retire TGW-B and use a single transit gateway to manage routing for the VPCs of both teams.

Which solution will meet this requirement with the LEAST operational overhead?

ACreate a resource share for TGW-A Share TGW-A with Account B. Create VPC attachments for the VPCs in Account . Configure routing for the VPCs in TGW-A route tables. Update the route tables of the VPCs in Account to forward traffic to TGW-A. Delete TGW-B attachments and TGW-B.

BCreate a resource share for TGW-A. Share TGW-A with Account . Replicate the TGW-B configuration to TGW-A to automatically start routing changes for the VPCs in Account . Delete TGW-B when routing changes are complete.

CCreate a new transit gateway (TGW-C) in Account A. Create a resource share for TGW-C. Share TGW-C with Account B. Create VPC attachments for the VPCs in Account A and Account . Configure routing for all the VPCs in TGW-C route tables. Update the route tables for the VPCs in Account A and Account to forward traffic to TGW-C. Delete TGW-A attachments and TGW-B attachments. Delete TGW-A and TGW-B.

DCreate a new transit gateway (TGW-C) in a new account (Account C). Create a resource share for TGW-C. Share TGW-C with Account A and Account B. Create VPC attachments for the VPCs in Account A and Account . Configure routing for all the VPCs in TGW-C route tables. Update the route tables for the VPCs in Account A and Account to forward traffic to TGW-C. Delete TGW-A attachments and TGW-B attachments. Delete TGW-A and TGW-B.

Reveal Solution Hide Solution

Correct Answer: A

This solution minimizes operational overhead by using a single transit gateway (TGW-A) for both teams, while also leveraging resource sharing between accounts. This approach eliminates the need to create new transit gateways, thus reducing complexity and the operational overhead of managing multiple transit gateways.

Question #5

A global company runs business applications in the us-east-1 Region inside a VPC. One of the company's regional offices in London uses a virtual private gateway for an AWS Site-to-Site VPN connection tom the VPC. The company has configured a transit gateway and has set up peering between the VPC and other VPCs that various departments in the company use.

Employees at the London office are experiencing latency issues when they connect to the business applications.

What should a network engineer do to reduce this latency?

ACreate a new Site-to-Site VPN connection. Set the transit gateway as the target gateway. Enable acceleration on the new Site-to-Site VPN connection. Update the VPN device in the London office with the new connection details.

BModify the existing Site-to-Site VPN connection by setting the transit gateway as the target gateway. Enable acceleration on the existing Site-to-Site VPN connection.

CCreate a new transit gateway in the eu-west-2 (London) Region. Peer the new transit gateway with the existing transit gateway. Modify the existing Site-to-Site VPN connection by setting the new transit gateway as the target gateway.

DCreate a new AWS Global Accelerator standard accelerator that has an endpoint of the Site-to-Site VPN connection. Update the VPN device in the London office with the new connection details.

Reveal Solution Hide Solution

Correct Answer: A

Enabling acceleration for a Site-to-Site VPN connection uses AWS Global Accelerator to route traffic from the on-premises network to an AWS edge location that is closest to the customer gateway device1.AWS Global Accelerator optimizes the network path, using the congestion-free AWS global network to route traffic to the endpoint that provides the best application performance2.Setting the transit gateway as the target gateway enables connectivity between the on-premises network and multiple VPCs that are attached to the transit gateway3.

Explore Other Amazon Exams

Unlock Premium ANS-C01 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Unlock all ANS-C01 features

Just for $59 you get

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Login First To Buy This Product

Password

Questions and Answers Demo

Web-Based Practice Test Demo

Start Demo