[ANS-C00] AWS Certified Advanced Networking

Created on April 12, 2025 By

Exam Total

Amazon

[ANS-C00] AWS Certified Advanced Networking

This credential helps organizations identify and develop talent with critical skills for implementing cloud initiatives. Earning AWS Certified Advanced Networking - Specialty validates expertise in designing and maintaining network architecture for the breadth of AWS services.

1 / 10

Which of the following statements does not describe Jumbo Frames in an AWS VPC environment?

A. For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible

B. Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway

C. Jumbo Frames are not supported for traffic that exits the Internet Gateway

D. T2.micro instances do not support Jumbo Frames

2 / 10

Your organization has a newly installed 1-Gbps AWS Direct Connect connection. You order the cross-connect from the Direct Connect location provider to the port on your router in the same facility. To enable the use of your first virtual interface, your router must be configured appropriately.
What are the minimum requirements for your router?

A. 1-Gbps Multi Mode Fiber Interface, 802.1Q VLAN, Peer IP Address, BGP Session with MD5.

B. 1-Gbps Single Mode Fiber Interface, 802.1Q VLAN, Peer IP Address, BGP Session with MD5.

C. IPsec Parameters, Pre-Shared key, Peer IP Address, BGP Session with MD5

D. BGP Session with MD5, 802.1Q VLAN, Route-Map, Prefix List, IPsec encrypted GRE Tunnel

3 / 10

You have a hybrid infrastructure and you have configured your own DNS server on an EC2 instance in your 10.1.3.0/24 subnet. This subnet resides on the VPC
10.1.0.0/16. You need your data center to be able to resolve Route 53 queries in your private hosted zone. What do you need to do to accomplish this?

A. Disable the source/destination check flag for the DNS instance.

B. Configure your DNS server to forward queries for the private hosted zone to 10.1.3.2.

C. Configure your DNS server to forward queries for the private hosted zone to 10.1.0.2.

D. Configure the VPC DHCP option set in the VPC to point to the EC2 DNS server.

4 / 10

You have a hybrid environment in which your VPC queries your on-premises DNS server for up resources in your environment. The EC2 instances in your VPC are unable to resolve on-premises resources.
What are two possible reasons for this problem? (Choose two.)

A. Your NACL is blocking UDP port 53 outbound

B. Your security group is blocking port 53 inbound

C. Your NACL is blocking TCP port 53 outbound.

D. Your on-premises firewall is blocking port 443

5 / 10

A corporate network routing table contains 624 individual RFC 1918 and public IP prefixes. You have two AWS Direct Connect connectors. You configure a private virtual interface on both connections to a virtual private gateway. The virtual private gateway is not currently attached to a VPC. Neither BGP session will maintain the Established state on the customer router. The AWS Management Console reports the private virtual interfaces as Down.
What could you do to address the problem so that the AWS Management Console reports the private virtual interface as Available?

A. Attach the virtual private gateway to a VPC and enable route propagation.

B. Filter the public IP pre?xes on the corporate network from the private virtual interface.

C. Change the BGP advertisements from the corporate network to only be a default route.

D. Attach the second virtual interface to an alternative virtual private gateway.

6 / 10

Your organization's corporate website must be available on www.acme.com and acme.com.
How should you configure Amazon Route 53 to meet this requirement?

A. Configure acme.com with an ALIAS record targeting the ELB. www.acme.com with an ALIAS record targeting the ELB.

B. Configure acme.com with an A record targeting the ELB. www.acme.com with a CNAME record targeting the acme.com record.

C. Configure acme.com with a CNAME record targeting the ELB. www.acme.com with a CNAME record targeting the acme.com record.

D. Configure acme.com using a second ALIAS record with the ELB target. www.acme.com using a PTR record with the acme.com record target.

7 / 10

What is the IPv6 subnet CIDR used by a VPC?

A. /128

B. /56

C. /48

D. /16

8 / 10

A company's web application is deployed on Amazon EC2 instances behind a public Application Load Balancer. The application flags malicious requests and uses an AWS Lambda function to add the offending IP addresses to the network ACL to block any further requests for 24 hours. Recently, the application has been receiving more malicious requests, which causes the network ACL to reach its limit of allowed entries.
Which action should be taken to block more IP addresses, without compromising the existing security requirements?

A. Update the AWS Lambda function to remove blocked entries from the network ACL after 2 hours.

B. Update the AWS Lambda function to block malicious IPs in security groups rather than the network ACL.

C. Update the AWS Lambda function to block malicious IPs in AWS WAF attached to the Application Load Balancer.

D. Update the AWS Lambda function to add an additional network ACL to the subnets once the limit for the previous ones has been reached.

9 / 10

How many BGP advertised routes can you have per route table?

A. 50

B. 200

C. 100

D. As many as you want as long as you contact AWS first.

10 / 10

A computing team is evaluating whether to place a high performance computing (HPC) application in AWS. The team is concerned about application performance and wants to know what options are available to increase networking performance.
Which of the following changes would increase performance for this application? (Choose two.)

A. Place the application across many smaller instances to achieve higher total throughput.

B. Increase the MTU of the VPC to 9001.

C. Enable an MTU of 9001 in the application's operating system.

D. Enable enhanced networking on the instances.

E. Deploy the application in two Availability Zones and insert them in one placement group.

Your score is

The average score is 0%

0%

Your input matters to us! Please take a moment to share your thoughts and feedback. We appreciate your contribution and strive to improve based on your insights. Thank you!

Thank you for taking the time to review our quiz. Your feedback is invaluable and helps us improve our content. We appreciate your input and hope you enjoyed participating! 🌟

Report a question

Leave a comment Cancel reply