Amazon ANS-C01 AWS Certified Advanced Networking – Specialty (ANS-C01) Free Practice Test — 30 Questions

Question 1

A company is migrating its on-premises applications to AWS and is concerned about maintaining the security of sensitive data during this transition. They are considering implementing a Virtual Private Cloud (VPC) with specific security measures. Which combination of security best practices should the company prioritize to ensure the confidentiality, integrity, and availability of their data in the cloud environment?

Accepted Answer

Implementing security groups and network access control lists (NACLs) to control inbound and outbound traffic, along with enabling encryption for data at rest and in transit.

Question 2

A global e-commerce company is experiencing latency issues for users accessing their application from various regions around the world. They are considering implementing a Content Delivery Network (CDN) to optimize network performance. The company has a multi-region architecture with data centers in North America, Europe, and Asia. They want to ensure that users are served content from the nearest data center while also maintaining data consistency across regions. Which strategy should the company adopt to effectively utilize the CDN while addressing latency and data consistency?

Accepted Answer

Implement edge caching with a TTL (Time to Live) policy that balances freshness and performance, and use a global load balancer to route requests to the nearest data center based on user location.

Question 3

In a corporate environment, a network engineer is tasked with configuring a secure file transfer system between two remote offices. The engineer decides to use FTP over a VPN to ensure data integrity and confidentiality. However, they also need to consider the implications of using FTP versus SFTP in this scenario. Which of the following statements best describes the advantages of using SFTP over FTP in this context?

Accepted Answer

SFTP encrypts both the command and data channels, providing a secure transfer method that protects sensitive information from eavesdropping and tampering.

Question 4

A company is planning to establish a secure connection between its on-premises data center and its AWS Virtual Private Cloud (VPC) using a VPN. The data center has a static public IP address of 203.0.113.5, and the AWS VPC is configured with a CIDR block of 10.0.0.0/16. The company needs to ensure that all traffic between the data center and the VPC is encrypted and that the VPN connection can handle a maximum throughput of 1 Gbps. Which of the following configurations would best meet these requirements while ensuring high availability and redundancy?

Accepted Answer

Create a Site-to-Site VPN connection using two virtual private gateways in different Availability Zones, enabling BGP for dynamic routing and configuring the VPN to use IPsec for encryption.

Question 5

A financial services company is designing a new application that requires high availability and fault tolerance to ensure uninterrupted service to its clients. The application will be deployed across multiple AWS regions and must handle sudden spikes in traffic while maintaining performance. The architecture includes load balancers, auto-scaling groups, and multiple instances of the application running in different availability zones. Given this scenario, which design principle should the company prioritize to achieve the desired level of availability and fault tolerance?

Accepted Answer

Implementing a multi-region architecture with active-active failover capabilities

Question 6

A company has been allocated the IP address block 192.168.1.0/24 for its internal network. The network administrator needs to create subnets for different departments within the organization: Sales, Marketing, and IT. The Sales department requires 50 IP addresses, Marketing needs 30 IP addresses, and IT requires 20 IP addresses. Using Variable Length Subnet Masking (VLSM), what is the most efficient way to allocate the subnets while minimizing wasted IP addresses?

Accepted Answer

Sales: 192.168.1.0/26, Marketing: 192.168.1.64/27, IT: 192.168.1.96/28

Question 7

A company is evaluating its AWS spending and wants to implement a cost management strategy to optimize its expenses. They currently have multiple EC2 instances running across different regions, and they are considering using Reserved Instances (RIs) to reduce costs. If the company anticipates a steady usage of 10 m5.large instances for the next 3 years, how much would they save compared to using On-Demand pricing, assuming the On-Demand price for an m5.large instance is $0.096 per hour and the Reserved Instance price is $0.067 per hour? Calculate the total savings over the 3-year period.

Accepted Answer

$25,344

Question 8

A global e-commerce company is experiencing latency issues for users accessing their website from various geographical locations. To enhance the user experience, they decide to implement a Content Delivery Network (CDN). The company has a primary data center located in the United States and plans to use a CDN provider that has edge locations in Europe, Asia, and South America. If the average latency from the primary data center to users in Europe is 150 ms, to users in Asia is 300 ms, and to users in South America is 200 ms, what would be the expected average latency for users accessing the website through the CDN if the CDN reduces latency by 50% for all regions?

Accepted Answer

100 ms

Question 9

In a cloud environment, a company is configuring its security posture for a web application that is hosted on Amazon EC2 instances. The application needs to be accessible from the internet on port 443 (HTTPS) while restricting access to the database server, which should only be accessible from the application servers. The company is considering using both Security Groups and Network ACLs to enforce these rules. Given this scenario, which of the following configurations would best achieve the desired security posture while ensuring that the application remains functional?

Accepted Answer

Configure a Security Group to allow inbound traffic on port 443 from anywhere and restrict all inbound traffic to the database server to only the application servers' IP addresses. Use a Network ACL to allow all outbound traffic from the application servers to the database server.

Question 10

A company is experiencing intermittent connectivity issues with its AWS-hosted applications. The network team has been tasked with monitoring the network performance to identify the root cause of these issues. They decide to implement Amazon CloudWatch to track network metrics. Which of the following metrics would be most critical for diagnosing potential packet loss in the network?

Accepted Answer

NetworkPacketsIn

Question 11

A company is experiencing intermittent network latency issues affecting its cloud-based applications. The network team decides to implement a performance monitoring solution to identify the root cause of the latency. They choose to monitor several key performance indicators (KPIs) including latency, jitter, and packet loss. If the average latency is measured at 150 ms, the jitter is recorded at 30 ms, and the packet loss rate is 2%, what is the overall impact on user experience, and which of the following strategies would be most effective in mitigating these issues?

Accepted Answer

Implementing Quality of Service (QoS) policies to prioritize critical application traffic

Question 12

A smart city initiative is deploying a network of IoT sensors to monitor traffic flow and environmental conditions. The data collected from these sensors is processed at the edge to reduce latency and bandwidth usage. If the city has 10,000 sensors, each generating 100 KB of data every minute, and the edge computing nodes can process data at a rate of 1 MB per second, how many edge nodes are required to handle the data processing without any backlog?

Accepted Answer

17

Question 13

A network engineer is tasked with designing a subnetting scheme for a company that has been allocated the IP address block 192.168.0.0/24. The company plans to create multiple subnets to accommodate different departments, each requiring at least 30 usable IP addresses. What is the most efficient CIDR notation for the subnets, and how many subnets can be created from the original block?

Accepted Answer

192.168.0.0/27, allowing for 8 subnets with 30 usable IP addresses each

Question 14

In a telecommunications company implementing Network Function Virtualization (NFV), the architecture is designed to optimize resource allocation for various virtual network functions (VNFs). The company has a total of 100 virtual machines (VMs) available for deployment. Each VNF requires a different amount of resources, with VNF1 needing 2 VMs, VNF2 needing 3 VMs, VNF3 needing 5 VMs, and VNF4 needing 8 VMs. If the company wants to deploy as many VNFs as possible without exceeding the total number of VMs, which combination of VNFs should they choose to maximize the number of deployed VNFs?

Accepted Answer

VNF1, VNF2, and VNF3

Question 15

A network engineer is tasked with monitoring the performance of a large-scale enterprise network that spans multiple geographical locations. The engineer needs to ensure that the network\'s latency, bandwidth utilization, and packet loss are within acceptable thresholds. To achieve this, the engineer decides to implement a combination of monitoring tools. Which of the following tools and techniques would be most effective in providing real-time insights into these performance metrics while also allowing for historical data analysis?

Accepted Answer

A combination of SNMP (Simple Network Management Protocol) for real-time monitoring and NetFlow for traffic analysis

Question 16

In a cloud-based architecture, a company is designing a hybrid network that connects its on-premises data center to AWS. The company needs to ensure that sensitive data is transmitted securely between its private network and the public cloud while maintaining high availability and low latency. Which connection type should the company implement to achieve these requirements effectively?

Accepted Answer

AWS Direct Connect

Question 17

A company has implemented a monitoring solution for its AWS infrastructure, which includes various alarms and dashboards to track performance metrics. The team has set up an alarm that triggers when the average CPU utilization of an EC2 instance exceeds 80% over a 5-minute period. They also have a dashboard that visualizes CPU utilization, memory usage, and network traffic. After a week of monitoring, the team notices that the alarm is frequently triggered, but the dashboard shows that the CPU utilization rarely exceeds 70%. What could be a plausible explanation for this discrepancy, and how should the team adjust their monitoring strategy to ensure accurate alerts?

Accepted Answer

The alarm is configured to evaluate the average CPU utilization over a short time frame, which may lead to false positives due to transient spikes in CPU usage. The team should consider adjusting the evaluation period to a longer duration, such as 15 minutes, to reduce the sensitivity of the alarm and align it better with the dashboard metrics.

Question 18

A company is designing a Virtual Private Cloud (VPC) architecture to host a web application that requires both public and private subnets. The application needs to allow users to access the web server from the internet while ensuring that the database server remains secure and is not directly accessible from the internet. The company plans to use an Internet Gateway for public access and a NAT Gateway for private subnet access. Given this scenario, which configuration would best meet the company\'s requirements while adhering to AWS best practices for VPC components?

Accepted Answer

Create two subnets: one public subnet with an Internet Gateway and one private subnet with a NAT Gateway, ensuring that the web server is in the public subnet and the database server is in the private subnet.

Question 19

A company is experiencing latency issues with its web application hosted on AWS. The application is deployed in multiple Availability Zones (AZs) within a single region. The team has identified that the database is the bottleneck, causing slow response times during peak traffic. To optimize performance, they are considering various strategies. Which approach would most effectively reduce latency for database queries while ensuring high availability and scalability?

Accepted Answer

Implement Amazon Aurora with read replicas across multiple AZs

Question 20

A company is deploying a multi-tier application using AWS CloudFormation. The application consists of a web tier, an application tier, and a database tier. The company wants to ensure that the infrastructure can be easily replicated across multiple environments (development, testing, and production) while maintaining consistency. They decide to use CloudFormation templates to define their infrastructure as code. If the company needs to update the application tier to use a new version of the application, which of the following strategies would best ensure that the changes are applied consistently across all environments while minimizing downtime?

Accepted Answer

Create a new CloudFormation stack for the application tier and update the existing stack to reference the new stack.

Question 21

A company is implementing a new cloud-based application that will handle sensitive customer data. To ensure the security of this application, the security team is considering various best practices. They want to implement a strategy that not only protects data at rest and in transit but also ensures that access controls are robust and regularly audited. Which of the following strategies should the team prioritize to achieve a comprehensive security posture for the application?

Accepted Answer

Implement encryption for data at rest and in transit, enforce strict IAM policies, and conduct regular security audits.

Question 22

A company is deploying a new web application that is expected to handle varying levels of traffic throughout the day. They are considering different load balancing algorithms to optimize resource utilization and minimize response time. If the application experiences a sudden spike in traffic, which load balancing algorithm would best ensure that the incoming requests are distributed evenly across the available servers while also considering the current load on each server?

Accepted Answer

Least Connections

Question 23

In a cloud-based environment, a company is considering the implementation of a multi-cloud strategy to enhance its resilience and flexibility. They plan to distribute their workloads across three different cloud providers. Each provider has a different pricing model based on resource usage, and the company anticipates that their total monthly usage will be 10,000 compute hours. Provider A charges $0.05 per compute hour, Provider B charges $0.04 per compute hour, and Provider C charges $0.06 per compute hour. If the company decides to allocate 40% of their workload to Provider A, 30% to Provider B, and 30% to Provider C, what will be the total monthly cost for the company?

Accepted Answer

$450

Question 24

A global e-commerce company is experiencing latency issues for users accessing their website from various geographical locations. To enhance performance and reduce load times, they decide to implement a Content Delivery Network (CDN). The company has a diverse user base, with a significant number of users located in regions far from their primary data center. They want to understand how the CDN can optimize content delivery and what factors they should consider when selecting a CDN provider. Which of the following factors is most critical for ensuring optimal performance and user experience when implementing a CDN?

Accepted Answer

The geographical distribution of CDN edge locations relative to the user base

Question 25

A company is experiencing intermittent network latency issues affecting its cloud-based applications. The network team decides to implement a performance monitoring solution to identify the root cause of the latency. They choose to monitor key performance indicators (KPIs) such as latency, jitter, and packet loss. If the average latency is measured at 150 ms with a standard deviation of 30 ms, and the acceptable latency threshold is set at 200 ms, what percentage of the latency measurements would be considered acceptable if the latency follows a normal distribution?

Accepted Answer

Approximately 84.13%

Question 26

A company is deploying a web application across multiple AWS regions to enhance availability and reduce latency for users worldwide. They decide to implement an Application Load Balancer (ALB) in front of their EC2 instances. The application experiences a sudden spike in traffic, leading to a 300% increase in requests per second (RPS) compared to the baseline. Initially, the ALB is configured to handle 1000 RPS. To maintain performance, the company needs to scale their EC2 instances dynamically. If each EC2 instance can handle 200 RPS, how many additional EC2 instances must be launched to accommodate the increased traffic while ensuring that the ALB can distribute the load effectively?

Accepted Answer

4

Question 27

A multinational corporation is implementing a federated identity management system to streamline access to its various cloud services across different regions. The IT team is considering using Single Sign-On (SSO) to enhance user experience and security. They need to ensure that users can authenticate once and gain access to multiple applications without needing to log in again. Which of the following best describes the primary benefit of implementing federated access with SSO in this context?

Accepted Answer

It allows users to authenticate across multiple domains using a single set of credentials, reducing the risk of password fatigue and improving security through centralized management.

Question 28

In a multi-tier application architecture, a company is implementing a new service that requires efficient communication between the application layer and the transport layer. The application is designed to handle a high volume of transactions, necessitating reliable data transfer and error recovery. Which protocol would be most suitable for ensuring that the application can maintain a reliable connection while also providing flow control and congestion avoidance?

Accepted Answer

Transmission Control Protocol (TCP)

Question 29

A company is planning to implement a dual-stack network to support both IPv4 and IPv6. They have a legacy application that requires a specific IPv4 address range of 192.168.1.0/24 and they want to assign IPv6 addresses from the range of 2001:0db8::/32. If the company needs to allocate 50 IPv4 addresses and 100 IPv6 addresses for their new servers, what is the minimum subnet size they should use for the IPv4 addresses, and how many /64 subnets can they create from the given IPv6 range?

Accepted Answer

The minimum subnet size for IPv4 is /26, and they can create 256 /64 subnets from the IPv6 range.

Question 30

A company has deployed a multi-region application on AWS, utilizing Route 53 for DNS management. The application is designed to serve users from different geographical locations, and it employs health checks to ensure high availability. The company has configured Route 53 to perform DNS failover in case the primary endpoint becomes unhealthy. If the health check for the primary endpoint fails for three consecutive intervals of 30 seconds each, what will be the total time taken before Route 53 switches to the secondary endpoint? Additionally, if the secondary endpoint is also configured with a health check that has a failure threshold of two consecutive intervals of 30 seconds, how long will it take for Route 53 to switch back to the primary endpoint if it becomes healthy again after the failover?

Accepted Answer

90 seconds for failover, 60 seconds for recovery

Amazon ANS-C01 AWS Certified Advanced Networking – Specialty (ANS-C01) Free Practice Test — 30 Questions

A lot more is already mapped out

About the Amazon ANS-C01 AWS Certified Advanced Networking – Specialty (ANS-C01) Certification