A company is designing a new VPC for a workload that must comply with HIPAA. The compliance team requires that all data be encrypted in transit and at rest, and that access to the VPC be restricted to authorized users only. What should the network engineer include in the design?

Use AWS WAF to restrict traffic, enable VPC Flow Logs, and use AWS KMS for encryption at rest.

Use network ACLs to restrict traffic, enable CloudTrail, and use AWS Certificate Manager for encryption in transit.

Use security groups to restrict traffic, enable VPC Flow Logs, and use AWS KMS to encrypt data at rest.

Use AWS Shield to restrict traffic, enable CloudTrail, and use AWS KMS for encryption at rest.

AWSCertified Advanced Networking - Specialty

Domain 4Objective 1

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 2)

Part of the Content Domain 4: Network Security, Compliance, and Governance domain, which accounts for 24% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~17–28 in this domain), expect 6–9 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

24%of the exam

10 Concepts in This Objective

Network Security Requirements Analysis
Security Group and NACL Implementation
VPC Peering and Transit Gateway Security
VPN and Direct Connect Security
Network Encryption
Logging and Monitoring for Compliance
Network Access Control and Segmentation
Compliance Frameworks Alignment
Incident Response and Remediation
Security Automation and Infrastructure as Code

Questions 6–10

6application · medium
A company is designing a new VPC for a workload that must comply with HIPAA. The compliance team requires that all data be encrypted in transit and at rest, and that access to the VPC be restricted to authorized users only. What should the network engineer include in the design?
Select an answer first
7foundation · easy
Which AWS feature can be used to control traffic between subnets at the subnet level?
Select an answer first
8foundation · easy
Which AWS service is used to manage encryption keys for encrypting data at rest in AWS services like S3 and EBS?
Select an answer first
9foundation · easy
Which AWS service provides threat detection and generates findings that can trigger automated incident response?
Select an answer first
10foundation · easy
Which compliance framework specifically includes requirements for network segmentation and firewall rules for organizations handling credit card data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 2)

Questions 6–10

A company is designing a new VPC for a workload that must comply with HIPAA. The compliance team requires that all data be encrypted in transit and at rest, and that access to the VPC be restricted to authorized users only. What should the network engineer include in the design?

Which AWS feature can be used to control traffic between subnets at the subnet level?

Which AWS service is used to manage encryption keys for encrypting data at rest in AWS services like S3 and EBS?

Which AWS service provides threat detection and generates findings that can trigger automated incident response?

Which compliance framework specifically includes requirements for network segmentation and firewall rules for organizations handling credit card data?

Keep studying — Content Domain 4: Network Security, Compliance, and Governance