What is the primary purpose of a NAT gateway in a VPC?

To allow inbound internet traffic to reach instances in a private subnet

To provide a static IP address for instances in a public subnet

To enable instances in a private subnet to initiate outbound internet traffic

What is the purpose of a conditional forwarding rule in Route 53 Resolver?

To block DNS queries for malicious domains

To cache DNS responses for faster resolution

To forward DNS queries for specific domains to a specified DNS resolver

To load balance DNS queries across multiple resolvers

What is the purpose of configuring two tunnels in an AWS Site-to-Site VPN connection?

To provide high availability by using two separate tunnels for failover

To connect to two different VPCs

To increase the bandwidth of the VPN connection

To allow both IPv4 and IPv6 traffic

What is the difference between a security group and a network ACL in a VPC?

Security groups are stateful, while network ACLs are stateless

Security groups allow only inbound rules, while network ACLs allow both inbound and outbound rules

Security groups operate at the subnet level, while network ACLs operate at the instance level

Security groups are stateless, while network ACLs are stateful

AWSCertified Advanced Networking - Specialty

Domain 2Objective 1

Task 2.1: Implement Routing and Connectivity Between On-Premises Networks and the AWS Cloud ANS-C01 Practice Questions (Page 4)

Part of the Content Domain 2: Network Implementation domain, which accounts for 26% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

11concepts

26%of the exam

11 Concepts in This Objective

AWS Site-to-Site VPN
AWS Direct Connect
Transit Gateway
VPC Peering
Route Tables and Routing Policies
BGP Routing
Hybrid DNS Resolution
Network Address Translation (NAT)
Security Groups and Network ACLs
High Availability and Failover
Monitoring and Troubleshooting Connectivity

Questions 16–20

16foundation · easy
What is the primary purpose of a NAT gateway in a VPC?
Select an answer first
17foundation · easy
What is the purpose of a conditional forwarding rule in Route 53 Resolver?
Select an answer first
18foundation · easy
What is the purpose of configuring two tunnels in an AWS Site-to-Site VPN connection?
Select an answer first
19foundation · easy
What is the difference between a security group and a network ACL in a VPC?
Select an answer first
20foundation · easy
Which AWS service provides DNS resolution between on-premises networks and VPCs using inbound and outbound endpoints?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.