Which AWS service continuously monitors resource configurations and can evaluate them against compliance rules?

AWS Identity and Access Management (IAM)

A network engineer is documenting the security requirements for a new VPC architecture that will host a customer-facing application. Which activity is part of identifying and documenting security and compliance requirements?

Creating a security group that allows only HTTPS traffic from the internet

Reviewing the organization's security policies and applicable regulatory standards to define traffic flow and data protection needs

Deploying AWS Network Firewall to inspect traffic between subnets

Configuring VPC Flow Logs to capture all network traffic metadata for auditing purposes

Which statement about securing a Transit Gateway attachment is correct?

Transit Gateway route tables control which VPCs can communicate, and security groups/NACLs filter traffic within each VPC

Transit Gateway attachments automatically encrypt all traffic between VPCs

Network ACLs are not needed when using Transit Gateway because it filters traffic itself

Security groups can be attached directly to Transit Gateway attachments

AWSCertified Advanced Networking - Specialty

Domain 4Objective 1

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 3)

Part of the Content Domain 4: Network Security, Compliance, and Governance domain, which accounts for 24% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~17–28 in this domain), expect 6–9 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

24%of the exam

10 Concepts in This Objective

Network Security Requirements Analysis
Security Group and NACL Implementation
VPC Peering and Transit Gateway Security
VPN and Direct Connect Security
Network Encryption
Logging and Monitoring for Compliance
Network Access Control and Segmentation
Compliance Frameworks Alignment
Incident Response and Remediation
Security Automation and Infrastructure as Code

Questions 11–15

11foundation · easy
Which AWS service records API activity in an AWS account for compliance and auditing purposes?
Select an answer first
12foundation · easy
Which AWS service continuously monitors resource configurations and can evaluate them against compliance rules?
Select an answer first
13foundation · easy
A network engineer is documenting the security requirements for a new VPC architecture that will host a customer-facing application. Which activity is part of identifying and documenting security and compliance requirements?
Select an answer first
14foundation · easy
Which statement about securing a Transit Gateway attachment is correct?
Select an answer first
15foundation · easy
Which mechanism is used to encrypt traffic over an AWS Site-to-Site VPN connection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 3)

Questions 11–15

Which AWS service records API activity in an AWS account for compliance and auditing purposes?

Which AWS service continuously monitors resource configurations and can evaluate them against compliance rules?

A network engineer is documenting the security requirements for a new VPC architecture that will host a customer-facing application. Which activity is part of identifying and documenting security and compliance requirements?

Which statement about securing a Transit Gateway attachment is correct?

Which mechanism is used to encrypt traffic over an AWS Site-to-Site VPN connection?

Keep studying — Content Domain 4: Network Security, Compliance, and Governance