A company has detected unusual outbound traffic from an EC2 instance in a private subnet. They suspect the instance is compromised and is communicating with a command-and-control server. They want to automatically isolate the instance and capture the traffic for analysis. What should they do?

Use AWS Systems Manager to isolate the instance and enable CloudTrail.

Use AWS WAF to block the outbound traffic and enable CloudTrail.

Use AWS Shield Advanced to block the outbound traffic and enable VPC Flow Logs.

Use AWS Network Firewall to block the outbound traffic and enable VPC Flow Logs to capture the traffic.

AWSCertified Advanced Networking - Specialty

Domain 4Objective 1

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 5)

Part of the Content Domain 4: Network Security, Compliance, and Governance domain, which accounts for 24% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~17–28 in this domain), expect 6–9 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

24%of the exam

10 Concepts in This Objective

Network Security Requirements Analysis
Security Group and NACL Implementation
VPC Peering and Transit Gateway Security
VPN and Direct Connect Security
Network Encryption
Logging and Monitoring for Compliance
Network Access Control and Segmentation
Compliance Frameworks Alignment
Incident Response and Remediation
Security Automation and Infrastructure as Code

Questions 21–25

21foundation · easy
Which option provides a private, dedicated network connection from an on-premises data center to AWS that does not traverse the public internet?
Select an answer first
22expert · hard
A company has detected unusual outbound traffic from an EC2 instance in a private subnet. They suspect the instance is compromised and is communicating with a command-and-control server. They want to automatically isolate the instance and capture the traffic for analysis. What should they do?
Select an answer first
23foundation · easy
Which AWS service can be used to automatically respond to network security incidents by modifying security groups or taking other remediation actions?
Select an answer first
24foundation · easy
Which AWS feature captures IP traffic information for network interfaces in a VPC and is commonly used for compliance auditing?
Select an answer first
25expert · hard
A company has a VPC with a three-tier architecture: web, application, and database subnets. The security team wants to limit lateral movement in case of a breach. They have implemented security groups and network ACLs, but they want to add an additional layer of segmentation that is independent of the VPC's routing table. Which AWS service should they use to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 4.1: Implement and Maintain Network Features to Meet Security and Compliance Needs and Requirements ANS-C01 Practice Questions (Page 5)

Questions 21–25

Which option provides a private, dedicated network connection from an on-premises data center to AWS that does not traverse the public internet?

A company has detected unusual outbound traffic from an EC2 instance in a private subnet. They suspect the instance is compromised and is communicating with a command-and-control server. They want to automatically isolate the instance and capture the traffic for analysis. What should they do?

Which AWS service can be used to automatically respond to network security incidents by modifying security groups or taking other remediation actions?

Which AWS feature captures IP traffic information for network interfaces in a VPC and is commonly used for compliance auditing?

Keep studying — Content Domain 4: Network Security, Compliance, and Governance