A company uses CloudFront to serve a web application. They need to restrict access to content so that only authenticated users can download files. They also want to protect the origin from being accessed directly. Which combination of CloudFront features should they use?

CloudFront signed cookies and AWS WAF rate-based rules

CloudFront signed URLs and origin access control (OAC)

CloudFront field-level encryption and AWS WAF SQL injection rules

CloudFront geo restriction and AWS Shield Advanced

A financial services company has a compliance requirement that certain data must remain in a specific country. They also need to provide low-latency access to that data for users in that country. They currently run their application in a VPC in the parent region. Which AWS edge service should they use to meet both requirements?

Amazon CloudFront with an origin in the parent region

AWS Global Accelerator with an endpoint in the parent region

AWS Local Zones in that country

A company uses CloudFront to serve a web application. They need to block requests from specific geographic regions and also protect against common web exploits like SQL injection. They want to minimize the impact on performance for legitimate users. Which combination of services should they use?

AWS WAF attached to the CloudFront distribution with a geo match rule and a SQL injection rule

CloudFront geo restriction and AWS WAF with a rate-based rule

AWS Shield Advanced with automatic application layer protection

AWS Network Firewall in front of the origin

AWSCertified Advanced Networking - Specialty

Domain 1Objective 1

Task 1.1: Design a Solution That Incorporates Edge Network Services to Optimize User Performance and Traffic Management for Global Architectures ANS-C01 Practice Questions (Page 1)

Part of the Content Domain 1: Network Design domain, which accounts for 30% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~21–35 in this domain), expect 4–6 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

30%of the exam

Questions 1–5

1foundation · easy
A network architect is designing a global application and needs to select an AWS edge service that provides static anycast IP addresses to act as a fixed entry point for traffic entering the AWS global network. Which AWS service provides this capability?
Select an answer first
2application · medium
A company uses CloudFront to serve a web application. They need to restrict access to content so that only authenticated users can download files. They also want to protect the origin from being accessed directly. Which combination of CloudFront features should they use?
Select an answer first
3application · medium
A financial services company has a compliance requirement that certain data must remain in a specific country. They also need to provide low-latency access to that data for users in that country. They currently run their application in a VPC in the parent region. Which AWS edge service should they use to meet both requirements?
Select an answer first
4foundation · easy
A company wants to route users to the AWS Region that provides the lowest network latency for their application. Which Amazon Route 53 routing policy should be used?
Select an answer first
5application · medium
A company uses CloudFront to serve a web application. They need to block requests from specific geographic regions and also protect against common web exploits like SQL injection. They want to minimize the impact on performance for legitimate users. Which combination of services should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 1.1: Design a Solution That Incorporates Edge Network Services to Optimize User Performance and Traffic Management for Global Architectures ANS-C01 Practice Questions (Page 1)

Questions 1–5

A network architect is designing a global application and needs to select an AWS edge service that provides static anycast IP addresses to act as a fixed entry point for traffic entering the AWS global network. Which AWS service provides this capability?

A company uses CloudFront to serve a web application. They need to restrict access to content so that only authenticated users can download files. They also want to protect the origin from being accessed directly. Which combination of CloudFront features should they use?

A company wants to route users to the AWS Region that provides the lowest network latency for their application. Which Amazon Route 53 routing policy should be used?

A company uses CloudFront to serve a web application. They need to block requests from specific geographic regions and also protect against common web exploits like SQL injection. They want to minimize the impact on performance for legitimate users. Which combination of services should they use?

Keep studying — Content Domain 1: Network Design