A company is designing a new VPC for a workload that must comply with GDPR. The compliance team requires that personal data be encrypted in transit and that access to the VPC be logged. What should the network engineer include in the design?

Use TLS for all traffic and enable VPC Flow Logs.

Use IPsec for all traffic and enable CloudTrail.

Use AWS KMS for encryption in transit and enable VPC Flow Logs.

Use AWS Certificate Manager for encryption in transit and enable CloudTrail.

A healthcare company is required to encrypt all data in transit between its on-premises EHR system and AWS. They are using a Site-to-Site VPN connection. What should they configure to ensure the VPN tunnel is encrypted?

Enable TLS on the VPN connection and use a certificate for authentication.

Enable MACsec on the VPN connection.

Use AWS PrivateLink to encrypt the traffic.

Enable IPsec on the VPN connection and use a pre-shared key or certificate for authentication.

AWSCertified Advanced Networking - Specialty

Domain 4Objective 1

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 4)

Part of the Content Domain 4: Network Security, Compliance, and Governance domain, which accounts for 24% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~17–28 in this domain), expect 6–9 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

24%of the exam

10 Concepts in This Objective

Network Security Requirements Analysis
Security Group and NACL Implementation
VPC Peering and Transit Gateway Security
VPN and Direct Connect Security
Network Encryption
Logging and Monitoring for Compliance
Network Access Control and Segmentation
Compliance Frameworks Alignment
Incident Response and Remediation
Security Automation and Infrastructure as Code

Questions 16–20

16application · medium
A company is designing a new VPC for a workload that must comply with GDPR. The compliance team requires that personal data be encrypted in transit and that access to the VPC be logged. What should the network engineer include in the design?
Select an answer first
17foundation · easy
Which protocol is commonly used to encrypt network traffic in transit for web applications?
Select an answer first
18foundation · easy
Which compliance framework focuses on protecting personal data of individuals in the European Union?
Select an answer first
19foundation · easy
A network engineer needs to filter traffic between subnets within a VPC. Which AWS feature is stateful and automatically allows return traffic?
Select an answer first
20application · medium
A healthcare company is required to encrypt all data in transit between its on-premises EHR system and AWS. They are using a Site-to-Site VPN connection. What should they configure to ensure the VPN tunnel is encrypted?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 4)

Questions 16–20

A company is designing a new VPC for a workload that must comply with GDPR. The compliance team requires that personal data be encrypted in transit and that access to the VPC be logged. What should the network engineer include in the design?

Which protocol is commonly used to encrypt network traffic in transit for web applications?

Which compliance framework focuses on protecting personal data of individuals in the European Union?

A network engineer needs to filter traffic between subnets within a VPC. Which AWS feature is stateful and automatically allows return traffic?

A healthcare company is required to encrypt all data in transit between its on-premises EHR system and AWS. They are using a Site-to-Site VPN connection. What should they configure to ensure the VPN tunnel is encrypted?

Keep studying — Content Domain 4: Network Security, Compliance, and Governance