// aws certified advanced networking - specialty ans-c01
ANS-C01
Master complex AWS networking architectures with expert-led ANS-C01 practice questions and deep-dive technical explanations for cloud engineers.
272
questions
65
in exam
170m
duration
at a glance
What you get
PDF US$331Sub US$30/mopass 750 (scaled 100–1000)
Free practice questions are available without payment; anyone can start practicing at no cost.
access options
PDF bank or platform subscription?
Two separate purchases: a one-time PDF for ANS-C01, or a monthly subscription for online practice and simulators across the platform. A subscription does not include the PDF download.
option / 01 · pdf file
Full question bank PDF
US$331· one-time
- Full question bank as a print-ready PDF
- Lifetime access to this exam only
- Domain-tagged questions with explanations
- Separate from online practice — buy once
option / 02 · subscription
All exams · practice & simulator
US$29.99· per month
- Practice & exam simulator on every bank
- All current and future exams included
- Personal analytics and retention tools
- Cancel anytime — no per-exam upsells
sample · 1 of 272Shuffle
See what's in the bank.
multiNetwork Designmedium
15 votes · last validated recently
A company has started using AWS Cloud WAN with one edge location in the us-east-1 Region. The company has a production segment and a security segment in AWS Cloud WAN. The company also has a default core network policy.
The company has created a production VPC for the production workload. The company has created an outbound inspection VPC to inspect internet-bound traffic from the production VPC. The company has attached the production VPC to the production segment and has attached the outbound inspection VPC to the security segment. The company has also created an AWS Network Firewall firewall in the outbound inspection VPC to inspect internet-based traffic.
The company has updated a route table for the production VPC to send all internet-bound traffic to the AWS Cloud WAN core network. The company has updated a route table for the outbound inspection VPC to ensure that Network Firewall inspects any outgoing traffic and incoming traffic.
During testing, an Amazon EC2 instance in the production VPC cannot reach the internet. The company checks the Network Firewall rules and confirms that the rules are not blocking the traffic.
Which combination of steps will meet these requirements? (Choose two.)
The company has created a production VPC for the production workload. The company has created an outbound inspection VPC to inspect internet-bound traffic from the production VPC. The company has attached the production VPC to the production segment and has attached the outbound inspection VPC to the security segment. The company has also created an AWS Network Firewall firewall in the outbound inspection VPC to inspect internet-based traffic.
The company has updated a route table for the production VPC to send all internet-bound traffic to the AWS Cloud WAN core network. The company has updated a route table for the outbound inspection VPC to ensure that Network Firewall inspects any outgoing traffic and incoming traffic.
During testing, an Amazon EC2 instance in the production VPC cannot reach the internet. The company checks the Network Firewall rules and confirms that the rules are not blocking the traffic.
Which combination of steps will meet these requirements? (Choose two.)
A
Update the core network policy to configure segment sharing. Share the production segment with the security segment.
100%
B
Update the core network policy to create a static route for the security segment. Specify 0.0.0.0/0 as the destination CIDR block. Specify the outbound inspection VPC as an attachment.
20%
C
Update the core network policy to create a static route for the production segment. Specify 0.0.0.0/0 as the destination CIDR block. Specify the outbound inspection VPC as an attachment.
80%
D
Update the core network policy to create a static route for the production segment. Specify 10.2.0.0/16 as the destination CIDR block. Specify the outbound inspection VPC as an attachment.
0%
04 · coverage
Exam domains
Network Design30%
71 q
Network Implementation26%
93 q
Network Management and Operation20%
67 q
Network Security, Compliance, and Governance24%
41 q
community questionsview all →
Questions from the community
Top-voted approved contributions for this exam, reviewed before landing in the bank.
// top community questionsview all →
0.0 · 0 reviews
What candidates say
no reviews yet
related
You may also like
More exams based on your interests.
272 questions
PDF US$331 one-time·Sub US$30/mo
updated 14d ago·devco · cert
ANS-C01premiumamazon● updated 14d ago
AWS Certified Advanced Networking - Specialty ANS-C01 ANS.
Master complex AWS networking architectures with expert-led ANS-C01 practice questions and deep-dive technical explanations for cloud engineers.
// OFFICIAL EXAM LOGISTICS
source · amazon web services
// PASSING SCORE
750 / 1000· scaled
minimum to pass
75%of scale
// QUESTIONS
65official
// DURATION
170min
// EXAM FEE
300usd
// ITEM TYPES
Multiple choice
Multiple response
// questions
272in bank
// pass rate
92%self-reported
// last update
14d agoago
// add cadence · 12w
// downloadable pdf bank
PDF bank in preparation
A print-ready PDF of this exam’s question bank is coming soon.
// sample · 1 of 272
See what's in the bank.
#0224f049-a8ab-4ffc-b856-b9e7fc5d316fmultiNetwork Designmedium
↑ +47· 6 comments· seen 1,284×
A company has started using AWS Cloud WAN with one edge location in the us-east-1 Region. The company has a production segment and a security segment in AWS Cloud WAN. The company also has a default core network policy.
The company has created a production VPC for the production workload. The company has created an outbound inspection VPC to inspect internet-bound traffic from the production VPC. The company has attached the production VPC to the production segment and has attached the outbound inspection VPC to the security segment. The company has also created an AWS Network Firewall firewall in the outbound inspection VPC to inspect internet-based traffic.
The company has updated a route table for the production VPC to send all internet-bound traffic to the AWS Cloud WAN core network. The company has updated a route table for the outbound inspection VPC to ensure that Network Firewall inspects any outgoing traffic and incoming traffic.
During testing, an Amazon EC2 instance in the production VPC cannot reach the internet. The company checks the Network Firewall rules and confirms that the rules are not blocking the traffic.
Which combination of steps will meet these requirements? (Choose two.)
The company has created a production VPC for the production workload. The company has created an outbound inspection VPC to inspect internet-bound traffic from the production VPC. The company has attached the production VPC to the production segment and has attached the outbound inspection VPC to the security segment. The company has also created an AWS Network Firewall firewall in the outbound inspection VPC to inspect internet-based traffic.
The company has updated a route table for the production VPC to send all internet-bound traffic to the AWS Cloud WAN core network. The company has updated a route table for the outbound inspection VPC to ensure that Network Firewall inspects any outgoing traffic and incoming traffic.
During testing, an Amazon EC2 instance in the production VPC cannot reach the internet. The company checks the Network Firewall rules and confirms that the rules are not blocking the traffic.
Which combination of steps will meet these requirements? (Choose two.)
Which combination of changes will achieve the goal? (Choose TWO.)
A
Update the core network policy to configure segment sharing. Share the production segment with the security segment.
100%B
Update the core network policy to create a static route for the security segment. Specify 0.0.0.0/0 as the destination CIDR block. Specify the outbound inspection VPC as an attachment.
20%C
Update the core network policy to create a static route for the production segment. Specify 0.0.0.0/0 as the destination CIDR block. Specify the outbound inspection VPC as an attachment.
80%D
Update the core network policy to create a static route for the production segment. Specify 10.2.0.0/16 as the destination CIDR block. Specify the outbound inspection VPC as an attachment.
0%E
Create an attachment to attach the outbound inspection VPC to the production segment. Update the core network policy to turn on isolated attachment for the production segment.
0%Community converges on A, C. Official key confirms.
15 votes · last validated recently
// explanation
Answers A and C are correct because sharing the production segment with the security segment (A) and creating a static route in the production segment (C) ensures traffic flows through the outbound inspection VPC for inspection.
contributed by
N1
@netdiver· revised by @cloud_chris// coverage · 4 domains
What this bank tests.
D130%
Network Design71 q
D226%
Network Implementation93 q
D320%
Network Management and Operation67 q
D424%
Network Security, Compliance, and Governance41 q
// composition
By format & difficulty.
// by format
75%
25%
single · 204multi · 68
// by difficulty
easy
15· 6%
medium
182· 67%
hard
75· 28%
// contributors · 0 engineers
Built by people who took the exam.
Every question is contributed by someone who recently sat ANS-C01, then reviewed by an SME before landing in the bank. These are the most prolific contributors.
No contributors for this exam yet. Be the first to contribute a question.
// community questions
Questions from the community
Top-voted approved contributions for this exam, reviewed before landing in the bank.
// top community questionsview all →
// compare
One bank, or the whole platform?
this bank
$331· one-time
platform · subscribed
$29.99· per month
This bank
All other banks · 23+ exams
Lifetime access
All future updates included
Personal analytics + retention
Cancel anytime
—
// 0 reviews
0.0/ 5
5
0
4
0
3
0
2
0
1
0
No reviews yet. Be the first to share your experience with this question bank.
// faq
Things buyers ask before they buy.
Q.
Can I practice for free?
Free practice questions are available without payment; anyone can start practicing at no cost.
Q.
What do subscribers get?
Subscribers unlock the full practice question bank for each certification exam.
Q.
How much can I see without a subscription?
Approximately 1/2 of the question bank is accessible without a subscription.
Q.
What is the passing score?
The official passing mark for this exam is 750 (scaled 100–1000).
Q.
How long is the certification valid?
The certification is valid for 3 years. Recertify by passing the current ANS-C01 exam or by achieving a relevant higher-level certification if applicable.
Q.
What experience is recommended?
Five or more years of hands-on experience designing and implementing complex network architectures, with at least two years specifically on AWS.
// related
You may also like
Discover more exams based on your interests.
// ready when you are
272 questions. 92% pass rate. $331 once.
Lifetime access · all updates included · 30-day refund