Free ANS-C01 mock test – Exam 1

AWS Certified Advanced Networking – Specialty (ANS-C01)

Free ANS-C01 practice exam for AWS Advanced Networking Specialty preparation.

Use this free AWS Certified Advanced Networking Specialty practice exam to review Transit Gateway, Direct Connect, hybrid DNS, Network Firewall, Cloud WAN, Route 53, WAF, IPv6, and advanced VPC networking.

10 exam-style questions Free ANS-C01 mock test Detailed option explanations No signup required

Start Practice Exam 1 below. Answer each question first, then use the explanations to review why each option is correct or incorrect.

AWS Certified Advanced Networking - Specialty (ANS-C01) Practice Exam 1

Free AWS Certified Advanced Networking Specialty ANS-C01 practice exam 1 with detailed explanations for every option.

1 / 10

Question

A company connects application VPCs through AWS Transit Gateway. EC2 instances in separate VPCs need to send larger payloads per packet to each other. All communication must continue to traverse the transit gateway. What should the network engineer configure?

Which option meets the requirement?

A. Enable jumbo frames on the transit gateway and set all EC2 network interfaces to an MTU of 9001 bytes.

B. Set the EC2 network interfaces to an MTU of 8500 bytes where the instance operating system and path support it.

C. Enable enhanced networking and set the transit gateway attachment MTU to 9001 bytes.

D. Set the VPC MTU attribute to 8500 bytes for every VPC attached to the transit gateway.

2 / 10

Question

A security team needs to audit traffic from two applications that run on Amazon EKS clusters using the Amazon VPC CNI plugin. The team must identify which pod IP addresses communicate with which services and wants to avoid collecting unnecessary flow logs. What should the team do?

Which option meets the requirement?

A. Create VPC Flow Logs in a custom format for the application subnets and include pkt-srcaddr and pkt-dstaddr.

B. Create VPC Flow Logs in the default format for the entire VPC and use srcaddr and dstaddr only.

C. Enable ELB access logs on every service and infer pod IP addresses from target health checks.

D. Create CloudTrail data events for the EKS clusters and filter events by pod labels.

3 / 10

Question

A company has more than 50 AWS accounts across several Regions and wants centralized administration of AWS Network Firewall policies. Which prerequisites and service should the company use?

Which option meets the requirement?

A. Use AWS Firewall Manager with AWS Organizations all features enabled, designate a Firewall Manager administrator, and ensure AWS Config is enabled.

B. Use AWS Shield Advanced only and create one security group policy per account.

C. Create a Lambda function in every account that copies firewall rules from an S3 bucket.

D. Use Resource Access Manager to share one Network Firewall endpoint with every VPC in every Region.

4 / 10

Question

A company has hundreds of application VPCs, a shared services VPC, and a VPN connection to an on-premises network. The company wants centralized routing control with isolation between application VPCs unless explicitly allowed. Which design best fits?

Which option meets the requirement?

A. Use a transit gateway with separate route tables for application, shared services, and hybrid routing domains.

B. Peer every application VPC with every other application VPC and manually update route tables.

C. Use one internet gateway in the shared services VPC for all east-west traffic.

D. Create one NAT gateway in each application VPC and route inter-VPC traffic through NAT.

5 / 10

Question

A company wants encrypted connectivity from on-premises to AWS Transit Gateway but does not want VPN traffic to traverse the public internet. The company already has AWS Direct Connect. Which solution should the network engineer use?

Which option meets the requirement?

A. Create a public Site-to-Site VPN connection over the internet and prefer it with BGP AS path prepending.

B. Create an AWS Site-to-Site VPN connection with private IP addresses over Direct Connect to the transit gateway.

C. Use VPC peering between the on-premises router and the transit gateway.

D. Create an internet gateway route to the customer gateway and encrypt traffic with security groups.

6 / 10

Question

A global online game runs in one AWS Region and uses UDP traffic. Players in distant locations report inconsistent responsiveness. Which AWS service can improve routing performance to the game endpoints without requiring users to choose a Region?

Which option meets the requirement?

A. AWS Global Accelerator

B. S3 Transfer Acceleration

C. Route 53 private hosted zones

D. AWS Client VPN

7 / 10

Question

Applications in several VPCs must resolve on-premises DNS names, and on-premises clients must resolve private names hosted in Route 53. The VPCs connect to on-premises over Direct Connect. Which solution should be used?

Which option meets the requirement?

A. Deploy Route 53 Resolver outbound endpoints for queries to on-premises DNS and inbound endpoints for queries from on-premises DNS.

B. Create public hosted zones for all private names and restrict access with security groups.

C. Use a NAT gateway as a DNS proxy between AWS and on-premises.

D. Configure DHCP option sets to forward Route 53 private hosted zone data to on-premises automatically.

8 / 10

Question

A company uses Transit Gateway to connect many VPCs. Security policy requires deep packet inspection for any traffic that leaves a VPC boundary, including traffic to the internet and to other VPCs. Which design should the network engineer implement?

Which option meets the requirement?

A. Centralize inspection in an inspection VPC and use Transit Gateway route tables with appliance mode for stateful firewall appliances.

B. Attach an internet gateway to every VPC and rely on security groups only.

C. Use VPC peering so traffic automatically passes through a firewall in the shared services VPC.

D. Enable S3 gateway endpoints in every VPC and route all traffic through them.

9 / 10

Question

A web application is deployed behind an Application Load Balancer in two Regions. Route 53 hosts the public domain. The company wants DNS to route users to healthy regional endpoints and prefer lower latency. Which routing policy should be used?

Which option meets the requirement?

A. Latency routing with health checks for the regional ALB records.

B. Simple routing with one record for both ALBs and no health checks.

C. Geoproximity routing without health checks and with all bias values set to zero.

D. Failover routing with the farther Region always configured as primary.

10 / 10

Question

A company hosts public domains in Route 53 and must protect DNS responses from tampering by providing data origin authentication and integrity validation. What should the company configure?

Which option meets the requirement?

A. DNSSEC signing for the Route 53 public hosted zones and DS records at the domain registrar.

B. A private hosted zone with the same domain name.

C. A Route 53 health check for every DNS record.

D. TLS certificates in ACM for the hosted zone records.

Your score is

The average score is 0%

What Practice Exam 1 covers

Transit Gateway MTU, route tables, and inspection VPC designs
VPC Flow Logs for Amazon EKS pod traffic visibility
AWS Firewall Manager and organization-wide network security
Hybrid connectivity with AWS Direct Connect and Site-to-Site VPN
Route 53 Resolver, Global Accelerator, and DNSSEC controls

Who should take this free mock test

Use this ANS-C01 practice exam if you are preparing for AWS Certified Advanced Networking – Specialty and want focused, free practice with detailed explanations.

Browse AWS practice exams Study AWS articles

FAQ

Is this ANS-C01 practice exam free?

Yes. This AWS Certified Advanced Networking Specialty mock test is free to open and retake.

Does this replace hands-on AWS practice?

No. Use it with hands-on labs for Transit Gateway, Direct Connect, Route 53 Resolver, Network Firewall, Cloud WAN, Global Accelerator, WAF, and VPC Flow Logs.

How should I review missed questions?

Read every option explanation, identify the AWS advanced networking pattern, and review the relevant service documentation before retaking the free practice exam.

Free AWS Advanced Networking Specialty Practice Exam 1 | ANS-C01 Mock Test

Free ANS-C01 practice exam for AWS Advanced Networking Specialty preparation.

Question

Correct Answer: B

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: B

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

Question

Correct Answer: A

Explanation

What Practice Exam 1 covers

Who should take this free mock test

FAQ

Is this ANS-C01 practice exam free?

Does this replace hands-on AWS practice?

How should I review missed questions?

Leave a Reply Cancel reply