1
AWS Certified Advanced
Networking – Specialty
(ANS-C01) Comprehensive
Practice Exam V2.0 – 150
Multiple-Choice Questions
a well detailed one 2025
/ 2026 written and
graded A+ upgraded
, 2
Domain 1: Network Design (Questions 1–40)
Question 1
A multinational company plans to deploy a mission-critical application across three AWS
Regions: us-east-1, eu-west-1, and ap-southeast-2. The application requires anycast IP addresses
for global low-latency access and seamless failover. Which solution meets these requirements?
A. Deploy Application Load Balancers in each region and use Route 53 latency-based routing
B. Deploy Network Load Balancers with Elastic IPs in each region and use Route 53 weighted
routing
C. Use AWS Global Accelerator with endpoints in each region
D. Use Amazon CloudFront with multiple origins and origin failover
- detailed answer 100% correct :- C
Rationale: AWS Global Accelerator provides anycast static IP addresses and uses the AWS global
network to route traffic to the optimal regional endpoint based on performance, health, and
geography. It provides seamless failover without DNS propagation delays.
Question 2
A company is migrating a legacy application to AWS. The application has a hardcoded
dependency on a specific public IP address for an external partner API. The partner API is
moving to AWS and will be hosted behind an Application Load Balancer. The company cannot
update the application code. How should they maintain connectivity?
A. Use an Elastic IP address and associate it with the ALB
B. Use a NAT Gateway with a static Elastic IP and route traffic through it
C. Use AWS PrivateLink to expose the ALB with a private IP
D. Use a Network Load Balancer with a static IP and associate it with the ALB as a target
- detailed answer 100% correct :- D
Rationale: Network Load Balancer supports Elastic IP addresses (static IPs) and can forward
traffic to an Application Load Balancer as a target, providing a static IP endpoint for the
application while maintaining ALB functionality.
, 3
Question 3
A company has VPC-A (10.0.0.0/16) and VPC-B (10.1.0.0/16) connected via VPC Peering. They
add a third VPC-C (10.2.0.0/16) and connect all three via a Transit Gateway. What is the
maximum number of route tables that can be associated with a single Transit Gateway?
A. 5
B. 10
C. 20
D. 100
- detailed answer 100% correct :- C
Rationale: AWS Transit Gateway supports up to 20 route tables per Transit Gateway by default,
with the ability to request increases.
Question 4
A network engineer is designing a hybrid network with two Direct Connect connections
(primary and backup) from different locations. They want traffic from AWS to on-premises to
prefer the primary connection. Which BGP community should they apply to the primary
connection?
A. 7224:9100
B. 7224:9200
C. 7224:9300
D. 7224:7100
- detailed answer 100% correct :- A
Rationale: For Direct Connect private VIFs, BGP community 7224:9100 sets the local preference
to high (primary path), while 7224:9200 sets low preference (secondary/backup).
Question 5
A company needs to connect 50 VPCs across multiple AWS accounts to a centralized on-
premises data center. The solution must support transitive routing and centralized route
management. Which service should they use?
A. VPC Peering with a mesh topology
B. AWS Transit Gateway with AWS Resource Access Manager (RAM)
C. AWS PrivateLink for each VPC
D. A centralized VPC with VPN connections to all other VPCs
, 4
- detailed answer 100% correct :- B
Rationale: AWS Transit Gateway provides transitive routing between VPCs and on-premises
networks. AWS RAM allows sharing the Transit Gateway across accounts, enabling centralized
management of multi-account VPC connectivity.
Question 6
A company is deploying a containerized application on Amazon EKS. The application requires
pod-to-pod communication across multiple Availability Zones with network policies. Which CNI
plugin should they use?
A. Calico
B. Weave Net
C. AWS VPC CNI
D. Cilium
- detailed answer 100% correct :- C
Rationale: AWS VPC CNI is the default and recommended CNI plugin for Amazon EKS, providing
native integration with AWS VPC networking.
Question 7
A company has deployed a Transit Gateway with multiple VPC attachments. They need to isolate
traffic between two groups of VPCs while allowing all VPCs to access a shared services VPC. How
should they configure the Transit Gateway?
A. Use a single route table with route propagation enabled for all attachments
B. Create two route tables: one for each isolated group, each with a static route to the shared
services VPC
C. Create three route tables: one for each isolated group and one for shared services, with
appropriate associations and propagations
D. Use VPC peering instead of Transit Gateway for isolation
- detailed answer 100% correct :- C
Rationale: Transit Gateway supports multiple route tables for route isolation. Create separate
route tables for each isolated group and associate the shared services VPC with a route table
that propagates routes to all groups.
AWS Certified Advanced
Networking – Specialty
(ANS-C01) Comprehensive
Practice Exam V2.0 – 150
Multiple-Choice Questions
a well detailed one 2025
/ 2026 written and
graded A+ upgraded
, 2
Domain 1: Network Design (Questions 1–40)
Question 1
A multinational company plans to deploy a mission-critical application across three AWS
Regions: us-east-1, eu-west-1, and ap-southeast-2. The application requires anycast IP addresses
for global low-latency access and seamless failover. Which solution meets these requirements?
A. Deploy Application Load Balancers in each region and use Route 53 latency-based routing
B. Deploy Network Load Balancers with Elastic IPs in each region and use Route 53 weighted
routing
C. Use AWS Global Accelerator with endpoints in each region
D. Use Amazon CloudFront with multiple origins and origin failover
- detailed answer 100% correct :- C
Rationale: AWS Global Accelerator provides anycast static IP addresses and uses the AWS global
network to route traffic to the optimal regional endpoint based on performance, health, and
geography. It provides seamless failover without DNS propagation delays.
Question 2
A company is migrating a legacy application to AWS. The application has a hardcoded
dependency on a specific public IP address for an external partner API. The partner API is
moving to AWS and will be hosted behind an Application Load Balancer. The company cannot
update the application code. How should they maintain connectivity?
A. Use an Elastic IP address and associate it with the ALB
B. Use a NAT Gateway with a static Elastic IP and route traffic through it
C. Use AWS PrivateLink to expose the ALB with a private IP
D. Use a Network Load Balancer with a static IP and associate it with the ALB as a target
- detailed answer 100% correct :- D
Rationale: Network Load Balancer supports Elastic IP addresses (static IPs) and can forward
traffic to an Application Load Balancer as a target, providing a static IP endpoint for the
application while maintaining ALB functionality.
, 3
Question 3
A company has VPC-A (10.0.0.0/16) and VPC-B (10.1.0.0/16) connected via VPC Peering. They
add a third VPC-C (10.2.0.0/16) and connect all three via a Transit Gateway. What is the
maximum number of route tables that can be associated with a single Transit Gateway?
A. 5
B. 10
C. 20
D. 100
- detailed answer 100% correct :- C
Rationale: AWS Transit Gateway supports up to 20 route tables per Transit Gateway by default,
with the ability to request increases.
Question 4
A network engineer is designing a hybrid network with two Direct Connect connections
(primary and backup) from different locations. They want traffic from AWS to on-premises to
prefer the primary connection. Which BGP community should they apply to the primary
connection?
A. 7224:9100
B. 7224:9200
C. 7224:9300
D. 7224:7100
- detailed answer 100% correct :- A
Rationale: For Direct Connect private VIFs, BGP community 7224:9100 sets the local preference
to high (primary path), while 7224:9200 sets low preference (secondary/backup).
Question 5
A company needs to connect 50 VPCs across multiple AWS accounts to a centralized on-
premises data center. The solution must support transitive routing and centralized route
management. Which service should they use?
A. VPC Peering with a mesh topology
B. AWS Transit Gateway with AWS Resource Access Manager (RAM)
C. AWS PrivateLink for each VPC
D. A centralized VPC with VPN connections to all other VPCs
, 4
- detailed answer 100% correct :- B
Rationale: AWS Transit Gateway provides transitive routing between VPCs and on-premises
networks. AWS RAM allows sharing the Transit Gateway across accounts, enabling centralized
management of multi-account VPC connectivity.
Question 6
A company is deploying a containerized application on Amazon EKS. The application requires
pod-to-pod communication across multiple Availability Zones with network policies. Which CNI
plugin should they use?
A. Calico
B. Weave Net
C. AWS VPC CNI
D. Cilium
- detailed answer 100% correct :- C
Rationale: AWS VPC CNI is the default and recommended CNI plugin for Amazon EKS, providing
native integration with AWS VPC networking.
Question 7
A company has deployed a Transit Gateway with multiple VPC attachments. They need to isolate
traffic between two groups of VPCs while allowing all VPCs to access a shared services VPC. How
should they configure the Transit Gateway?
A. Use a single route table with route propagation enabled for all attachments
B. Create two route tables: one for each isolated group, each with a static route to the shared
services VPC
C. Create three route tables: one for each isolated group and one for shared services, with
appropriate associations and propagations
D. Use VPC peering instead of Transit Gateway for isolation
- detailed answer 100% correct :- C
Rationale: Transit Gateway supports multiple route tables for route isolation. Create separate
route tables for each isolated group and associate the shared services VPC with a route table
that propagates routes to all groups.
