A company has a centralized shared services VPC in a central account that hosts a proprietary application. Multiple VPCs in different accounts and Regions need to access this application privately without traversing the public internet or establishing VPC peering connections. The application is fronted by a Network Load Balancer. Which solution should be used?

Expose the application through an internet-facing Application Load Balancer and have consumers use a NAT gateway.

Create a VPC endpoint service for the Network Load Balancer and create interface endpoints in each consumer VPC.

Attach all consumer VPCs to a transit gateway and route traffic to the shared services VPC.

Create a VPC peering connection between the shared services VPC and each consumer VPC.

What is a common method to achieve high availability for a VPN connection in a hybrid network architecture?

Using multiple VPN tunnels to the same or different endpoints

Using a single Direct Connect connection

A company has three VPCs in the same Region: VPC-A (10.0.0.0/16), VPC-B (10.1.0.0/16), and VPC-C (10.2.0.0/16). VPC-A is peered with VPC-B, and VPC-B is peered with VPC-C. An application in VPC-A must communicate with a database in VPC-C. The security team requires that traffic between VPC-A and VPC-C does not traverse the public internet. What should a network engineer do to enable this communication?

Use AWS PrivateLink to connect the application in VPC-A to the database in VPC-C.

Configure VPC-B as a NAT instance and route VPC-A traffic to VPC-C through it.

Add a route in VPC-A's route table pointing to VPC-C's CIDR via the VPC-B peering connection.

Create a new VPC peering connection between VPC-A and VPC-C and add the appropriate routes in both VPCs.

What is the purpose of a Direct Connect gateway in a hybrid network architecture?

To provide a private connection between an on-premises network and AWS

To provide a public endpoint for AWS services

To create a VPN connection over the internet

To route traffic between VPCs in different Regions

A company has two VPCs, VPC-A and VPC-B, in the same Region. VPC-A has a CIDR of 10.0.0.0/16, and VPC-B has a CIDR of 10.0.0.0/16. The company needs to enable private communication between the two VPCs. Which solution should be used?

Use AWS PrivateLink to expose a service in VPC-A and access it from VPC-B.

Create a transit gateway and attach both VPCs. Configure the transit gateway route table to route between the VPCs.

Create a VPC peering connection between VPC-A and VPC-B and add routes for the overlapping CIDRs.

Create a Site-to-Site VPN connection between the two VPCs.

AWSCertified Advanced Networking - Specialty

Domain 1Objective 6

Task 1.6: Design a Routing Strategy and Connectivity Architecture That Include Multiple AWS Accounts, AWS Regions, and VPCs to Support Different Connectivity Patterns ANS-C01 Practice Questions (Page 3)

Part of the Content Domain 1: Network Design domain, which accounts for 30% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~21–35 in this domain), expect 4–6 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

10concepts

30%of the exam

Questions 11–15

11application · medium
A company has a centralized shared services VPC in a central account that hosts a proprietary application. Multiple VPCs in different accounts and Regions need to access this application privately without traversing the public internet or establishing VPC peering connections. The application is fronted by a Network Load Balancer. Which solution should be used?
Select an answer first
12foundation · easy
What is a common method to achieve high availability for a VPN connection in a hybrid network architecture?
Select an answer first
13application · medium
A company has three VPCs in the same Region: VPC-A (10.0.0.0/16), VPC-B (10.1.0.0/16), and VPC-C (10.2.0.0/16). VPC-A is peered with VPC-B, and VPC-B is peered with VPC-C. An application in VPC-A must communicate with a database in VPC-C. The security team requires that traffic between VPC-A and VPC-C does not traverse the public internet. What should a network engineer do to enable this communication?
Select an answer first
14foundation · easy
What is the purpose of a Direct Connect gateway in a hybrid network architecture?
Select an answer first
15application · medium
A company has two VPCs, VPC-A and VPC-B, in the same Region. VPC-A has a CIDR of 10.0.0.0/16, and VPC-B has a CIDR of 10.0.0.0/16. The company needs to enable private communication between the two VPCs. Which solution should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 1.6: Design a Routing Strategy and Connectivity Architecture That Include Multiple AWS Accounts, AWS Regions, and VPCs to Support Different Connectivity Patterns ANS-C01 Practice Questions (Page 3)

Questions 11–15

What is a common method to achieve high availability for a VPN connection in a hybrid network architecture?

What is the purpose of a Direct Connect gateway in a hybrid network architecture?

A company has two VPCs, VPC-A and VPC-B, in the same Region. VPC-A has a CIDR of 10.0.0.0/16, and VPC-B has a CIDR of 10.0.0.0/16. The company needs to enable private communication between the two VPCs. Which solution should be used?

Keep studying — Content Domain 1: Network Design