AWS Advanced Networking Specialty Practice

Q: How many questions are in this practice set?

This practice set contains 60 questions with detailed explanations.

Q: What topics does this practice cover?

It covers the key topics and question types for AWS Certified Advanced Networking - Specialty (ANS-C01), including vocabulary, grammar, reading, and practical test skills.

Q: Are there explanations for every question?

Yes, every question includes a clear explanation so you can understand the correct answer and learn from mistakes.

Q: Can I save my progress and mistakes?

Your wrong answers, favorites, scores, and study streak are saved in your browser, so you can review them on the same device.

Q: What practice modes are available?

You can practice randomly, take a timed mock exam, filter by difficulty, type, and topic, search questions, and review wrong answers.

Practice 60 original AWS Advanced Networking Specialty questions covering network design, VPC routing, hybrid connectivity, network security, edge services, and network operations, with detailed explanations.

Level: AWS Certified Advanced Networking - Specialty (ANS-C01) Difficulty: advanced 60 questions 60 min

Choose a practice mode, answer each AWS Advanced Networking Specialty question, then review the explanation. Wrong answers are saved locally for review.

Practice mode Difficulty Topic Question type Search questions

Day streak: 0 days Saved only on this device

Question 1

What is AWS Global Accelerator?

Select an answer A service that routes traffic to optimal endpoints over the AWS global networkA DNS databaseA VPN gatewayA subnet firewall

Question 2

What is an AWS Transit Gateway?

Select an answer A databaseA CDNA hub that interconnects VPCs and on-premises networksA web server

Question 3

What is VPC sharing?

Select an answer Cloning a databaseSharing subnets with other accounts in the same organizationMaking a VPC publicCreating a VPN tunnel

Question 4

What is a VPC endpoint?

Select an answer An internet gatewayA route tableA security groupA private entry point to AWS services from a VPC

Question 5

What is AWS PrivateLink?

Select an answer A public website hostA DNS resolverA load balancerA technology that exposes services privately through endpoints

Question 6

What is a Gateway Load Balancer?

Select an answer A load balancer for deploying and scaling virtual appliancesA database load balancerA DNS serviceA firewall rule

Question 7

What is Route 53 Resolver?

Select an answer A subnetA NAT gatewayA DNS resolver that connects VPC and on-premises DNSA VPN endpoint

Question 8

What is AWS Outposts?

Select an answer A DNS zoneAWS infrastructure and services that run on-premisesA CDN edge siteA database cluster

Question 9

What is Amazon VPC Lattice?

Select an answer A service for connecting and securing service-to-service communicationA DNS recordA load balancerA VPN

Question 10

Match each AWS networking design service to its purpose.

Transit GatewayPrivateLinkGateway Load BalancerVPC Lattice

Question 11

What does a VPC route table define?

Select an answer How storage is encryptedHow traffic is directed from a subnet to destinationsWhich instances can be deletedWhich users can log in

Question 12

What is an internet gateway?

Select an answer A DNS resolverA VPN tunnelA horizontally scaled gateway for internet communicationA firewall

Question 13

What is a NAT gateway?

Select an answer A DNS serverA load balancerA managed service that provides outbound internet access for private subnetsAn inbound-only gateway

Question 14

What is an egress-only internet gateway?

Select an answer A gateway that allows IPv6 outbound traffic onlyA gateway that blocks all trafficA DNS zoneA NAT instance

Question 15

What is VPC peering?

Select an answer A public internet connectionA VPN tunnelA managed NATA direct private connection between two VPCs

Question 16

What is a prefix list?

Select an answer A VPN configurationA named set of CIDR ranges used in security and route rulesA DNS recordA subnet

Question 17

What is a network ACL?

Select an answer A stateful instance firewallA DNS resolverA routing tableA stateless firewall at the subnet boundary

Question 18

What is a subnet in a VPC?

Select an answer A range of IP addresses within a VPCA DNS zoneA load balancerA VPN tunnel

Question 19

What is a route table association?

Select an answer A VPN attachmentThe link between a subnet and its route tableA firewall ruleA DNS record

Question 20

Match each VPC routing concept to its purpose.

Internet gatewayNAT gatewayRoute tableNetwork ACL

Question 21

What is AWS Direct Connect?

Select an answer A private physical connection between on-premises and AWSA public internet routeA VPN tunnelA DNS service

Question 22

What is a Direct Connect Gateway?

Select an answer A NAT gatewayA DNS resolverA load balancerA gateway that connects Direct Connect to VPCs across accounts and Regions

Question 23

What is an AWS Site-to-Site VPN?

Select an answer A DNS zoneA CDNEncrypted tunnels between on-premises networks and AWSA private physical line

Question 24

What is AWS Client VPN?

Select an answer A transit gatewayA managed VPN service for individual remote usersA site-to-site tunnelA DNS resolver

Question 25

What is a virtual private gateway?

Select an answer A DNS recordThe VPN concentrator on the AWS side of a connectionA subnetA firewall

Question 26

What is BGP?

Select an answer A routing protocol used to exchange routes with AWSA database languageA DNS record typeA firewall rule

Question 27

What is an IPsec VPN tunnel?

Select an answer A physical cableA DNS queryA storage bucketAn encrypted tunnel that carries network traffic

Question 28

What is VPN CloudHub?

Select an answer A load balancerA databaseA hub that connects multiple branch offices through VPNsA DNS zone

Question 29

What is a Transit Gateway VPN attachment?

Select an answer A NAT gatewayA DNS recordA way to connect VPNs to the transit gateway hubA firewall

Question 30

Match each hybrid connectivity concept to its purpose.

Direct ConnectSite-to-Site VPNClient VPNDirect Connect Gateway

Question 31

What is a security group?

Select an answer A stateful virtual firewall for resourcesA stateless subnet firewallA DNS recordA route table

Question 32

What is AWS Network Firewall?

Select an answer A load balancerA DNS serviceA CDNA managed firewall service for VPC traffic

Question 33

What is AWS WAF?

Select an answer A DNS zoneA web application firewall that protects HTTP trafficA network ACLA VPN

Question 34

What is AWS Shield Advanced?

Select an answer Managed DDoS protection with expanded detectionA password managerA DNS serviceA firewall appliance

Question 35

What are VPC Flow Logs?

Select an answer Application logsDNS recordsBackup filesRecords of IP traffic metadata in a VPC

Question 36

What is Traffic Mirroring?

Select an answer Routing DNSBacking up databasesCopying network traffic for security inspectionEncrypting all traffic

Question 37

What is AWS Firewall Manager?

Select an answer A load balancerA VPN gatewayA service that centrally manages firewall rules across accountsA DNS service

Question 38

What is an AWS Network Firewall rule group?

Select an answer A security groupA reusable set of filtering rules for network trafficA route tableA DNS zone

Question 39

What is the main benefit of a security group reference?

Select an answer Referencing another group instead of CIDRs in rulesDeleting firewall rulesCreating DNS recordsEncrypting traffic

Question 40

Match each network security service to its purpose.

Security groupNetwork FirewallAWS WAFShield Advanced

Question 41

What is Amazon CloudFront?

Select an answer A databaseA global content delivery networkA DNS serverA VPN gateway

Question 42

What is latency-based routing in Route 53?

Select an answer Routing by countryRouting by weightRouting randomlyRouting users to the Region with the lowest latency

Question 43

What is weighted routing in Route 53?

Select an answer Distributing traffic across endpoints by weightRouting to the closest edgeRouting to one RegionFailing over automatically

Question 44

What is failover routing in Route 53?

Select an answer Routing by geolocationRouting by weightRouting to a primary endpoint and switching on health check failureRouting by latency

Question 45

What is geolocation routing in Route 53?

Select an answer Routing users based on their geographic locationRouting by latencyRouting by weightRouting by IP protocol

Question 46

What is a CloudFront signed URL?

Select an answer A VPN profileA temporary URL that grants access to private contentA DNS recordA firewall rule

Question 47

What is an origin in CloudFront?

Select an answer An edge locationA DNS zoneA load balancerThe source server that stores original content

Question 48

What is AWS Global Accelerator used for at the edge?

Select an answer Resolving DNS onlyFiltering web trafficImproving performance and availability through edge locationsStoring objects

Question 49

What is CloudFront origin failover?

Select an answer A DNS recordA VPN tunnelA subnetSwitching to a backup origin when the primary fails

Question 50

Match each edge routing concept to its purpose.

CloudFrontLatency routingWeighted routingFailover routing

Question 51

What is Reachability Analyzer?

Select an answer A firewallA VPNA tool that tests whether traffic can reach a destinationA DNS resolver

Question 52

What is Network Access Analyzer?

Select an answer A subnetA tool that finds unintended network accessA load balancerA DNS service

Question 53

What is AWS Transit Gateway Network Manager?

Select an answer A CDNA service that visualizes and monitors global networksA firewallA database

Question 54

What is Amazon VPC IP Address Manager?

Select an answer A DNS resolverA load balancerA VPN gatewayA service that plans and tracks IP address usage

Question 55

What is CloudWatch Internet Monitor?

Select an answer A service that monitors internet performance between users and AWSA DNS zoneA firewallA NAT gateway

Question 56

What is AWS Config used for in networking?

Select an answer Storing objectsEncrypting dataRecording and evaluating network resource configurationRouting traffic

Question 57

What is AWS CloudTrail used for in networking?

Select an answer Resolving DNSDelivering contentRecording API activity for audit and troubleshootingFiltering network traffic

Question 58

What are CloudWatch network metrics?

Select an answer Security rulesNumerical measurements of network performance and trafficLog filesDNS records

Question 59

What is a packet capture in AWS networking?

Select an answer Blocking trafficResolving DNSAssigning IPsRecording network packets for analysis

Question 60

Match each network operations tool to its purpose.

Reachability AnalyzerNetwork ManagerVPC IPAMInternet Monitor