A company is experiencing intermittent connectivity issues between an on-premises data center and a VPC over an AWS Direct Connect connection. The issue occurs only during peak hours. The network team needs to determine if the problem is due to bandwidth saturation or packet loss. What is the best approach?

Enable Route 53 Resolver Query Logs to monitor DNS resolution times during peak hours.

Enable VPC Flow Logs and analyze the traffic volume to see if it exceeds the Direct Connect bandwidth.

Use AWS CloudWatch Synthetics to run a continuous ping test from an EC2 instance in the VPC to an on-premises server.

Monitor the CloudWatch metrics for the Direct Connect virtual interface, such as TxBytes and RxBytes, and compare them to the provisioned bandwidth.

A user reports that they cannot SSH to an EC2 instance in a public subnet. The security group allows SSH from the user's IP, and the network ACL allows it. The instance has a public IP. Which log should the network engineer examine first to determine if the packets are reaching the instance?

AWS CloudTrail logs for the EC2 instance

VPC Flow Logs for the ENI of the instance

CloudWatch Logs for the instance's system log

AWSCertified Advanced Networking - Specialty

Domain 1Objective 4

Task 1.4: Define Logging and Monitoring Requirements Across AWS and Hybrid Networks ANS-C01 Practice Questions (Page 5)

Part of the Content Domain 1: Network Design domain, which accounts for 30% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~21–35 in this domain), expect 4–6 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

30%of the exam

Questions 21–25

21foundation · easy
Which AWS service can be used to monitor network metrics such as latency and packet loss between two points in a hybrid network?
Select an answer first
22expert · hard
A company is experiencing intermittent connectivity issues between an on-premises data center and a VPC over an AWS Direct Connect connection. The issue occurs only during peak hours. The network team needs to determine if the problem is due to bandwidth saturation or packet loss. What is the best approach?
Select an answer first
23foundation · easy
In a hybrid network, which AWS service can be used to forward logs from an on-premises network device to AWS for centralized analysis?
Select an answer first
24foundation · easy
Which AWS service provides a tamper-evident log of API activity that can be used to demonstrate compliance with audit requirements?
Select an answer first
25application · medium
A user reports that they cannot SSH to an EC2 instance in a public subnet. The security group allows SSH from the user's IP, and the network ACL allows it. The instance has a public IP. Which log should the network engineer examine first to determine if the packets are reaching the instance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 1.4: Define Logging and Monitoring Requirements Across AWS and Hybrid Networks ANS-C01 Practice Questions (Page 5)

Questions 21–25

Which AWS service can be used to monitor network metrics such as latency and packet loss between two points in a hybrid network?

In a hybrid network, which AWS service can be used to forward logs from an on-premises network device to AWS for centralized analysis?

Which AWS service provides a tamper-evident log of API activity that can be used to demonstrate compliance with audit requirements?

A user reports that they cannot SSH to an EC2 instance in a public subnet. The security group allows SSH from the user's IP, and the network ACL allows it. The instance has a public IP. Which log should the network engineer examine first to determine if the packets are reaching the instance?

Keep studying — Content Domain 1: Network Design