{"id":15275,"date":"2026-09-17T11:23:37","date_gmt":"2026-09-17T11:23:37","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=15275"},"modified":"2026-09-17T11:23:37","modified_gmt":"2026-09-17T11:23:37","slug":"amazon-aws-certified-advanced-networking-specialty-ans-c01-practice-test-questions-and-exam-dumps-part-7-q121-140","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-advanced-networking-specialty-ans-c01-practice-test-questions-and-exam-dumps-part-7-q121-140\/","title":{"rendered":"Amazon AWS Certified Advanced Networking &#8211; Specialty ANS-C01 Practice Test Questions and Exam Dumps Part 7 Q121-140"},"content":{"rendered":"<h1><\/h1>\n<p><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/aws-certified-advanced-networking-specialty-ans-c01-exam-dumps\"><b>Amazon AWS Certified Advanced Networking &#8211; Specialty ANS-C01 Exam Dumps<\/b><\/a><b> and Practice Test Dumps<\/b><\/p>\n<p>&nbsp;<\/p>\n<h3><b>Question 121. Which AWS service can be used to analyze the path between two network resources and identify the configuration component preventing connectivity?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon CloudWatch<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Network Firewall<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> VPC Reachability Analyzer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon Route 53<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. VPC Reachability Analyzer<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">VPC Reachability Analyzer is a configuration analysis tool that helps determine whether a network path exists between specified AWS resources. It examines networking components such as route tables, security groups, network ACLs, and other supported configurations to determine whether connectivity is possible. If the path is not reachable, the analysis can identify the component responsible for the blockage. This makes the service particularly useful for troubleshooting complex VPC architectures before making unnecessary configuration changes. Reachability Analyzer does not generate normal application traffic to perform the analysis, making it valuable for validating network configuration in advance.<\/span><\/p>\n<h3><b>Question 122. Which AWS feature allows administrators to record metadata about network traffic flowing through VPC network interfaces?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> VPC Flow Logs<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Traffic Mirroring<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Cloud WAN<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Route 53 Resolver<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. VPC Flow Logs<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">VPC Flow Logs capture metadata about IP traffic flowing to and from network interfaces in a VPC. Flow records can include information such as source and destination addresses, source and destination ports, protocol, packet counts, byte counts, and whether traffic was accepted or rejected. They are useful for troubleshooting connectivity, investigating security events, and understanding traffic patterns. Flow Logs do not capture packet payloads, so they are not a replacement for packet-level inspection. For deeper packet analysis, Traffic Mirroring may be more appropriate. Flow Logs can be delivered to supported AWS destinations for storage, analysis, and operational monitoring.<\/span><\/p>\n<h3><b>Question 123. An administrator wants to monitor the number of packets dropped by a security group or network ACL. Which service can provide useful traffic metadata for this investigation?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> CloudFront<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> VPC Flow Logs<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Global Accelerator<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Direct Connect Gateway<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. VPC Flow Logs<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">VPC Flow Logs can provide valuable information when investigating network traffic that is accepted or rejected by VPC networking controls. Flow records include an action field indicating whether traffic was accepted or rejected, depending on the flow-log format and the network component being observed. This can help administrators identify unexpected connectivity failures and investigate whether traffic is reaching the relevant network interface. Flow Logs should not be interpreted as packet captures because they contain metadata rather than packet contents. When combined with route-table analysis, security-group review, and network ACL inspection, Flow Logs can significantly simplify VPC troubleshooting.<\/span><\/p>\n<h3><b>Question 124. Which AWS service can provide a centralized firewall capability for inspecting traffic across multiple VPCs?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Network Firewall<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon Route 53<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Certificate Manager<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon CloudFront<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS Network Firewall<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS Network Firewall is a managed network firewall service that can inspect and control network traffic within VPC environments. Organizations can deploy it in a dedicated inspection VPC and use routing architectures such as Transit Gateway to direct traffic from multiple application VPCs through the firewall. This centralized model can simplify security policy management and reduce the need to operate separate firewall infrastructure in every VPC. Network Firewall supports stateless and stateful rule groups, allowing organizations to implement different types of traffic controls. Routing must be designed carefully so that both forward and return traffic follows the intended inspection path.<\/span><\/p>\n<h3><b>Question 125. Which AWS service is designed primarily to protect applications from distributed denial-of-service attacks?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Shield<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS PrivateLink<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon Route 53 Resolver<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Direct Connect<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS Shield<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS Shield is a managed DDoS protection service designed to help protect AWS applications and resources from distributed denial-of-service attacks. AWS Shield Standard provides automatic protection for common network and transport layer DDoS events, while AWS Shield Advanced provides additional capabilities for customers with more demanding protection and visibility requirements. Shield operates differently from AWS WAF, which focuses on inspecting and filtering web requests based on configured rules. Organizations can use these services together as part of a layered security architecture. Effective DDoS resilience also requires appropriate application architecture, scaling, monitoring, and traffic-management strategies.<\/span><\/p>\n<h3><b>Question 126. Which AWS service can protect web applications by applying rate-based rules that can help limit excessive requests from individual sources?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS WAF<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Direct Connect<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Transit Gateway<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon Route 53 Resolver<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS WAF<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS WAF supports rate-based rules that can help detect and control excessive request rates. These rules can be useful when an application needs protection from request floods, abusive clients, or certain types of automated traffic. Administrators can configure thresholds and actions based on the application&#8217;s expected traffic patterns. AWS WAF is focused on HTTP and HTTPS request inspection, so it is different from AWS Shield, which provides DDoS protection at broader network and transport layers. Rate-based rules should be tuned carefully because legitimate traffic spikes can also trigger thresholds. Monitoring and gradual adjustment are important when deploying rate-based protections.<\/span><\/p>\n<h3><b>Question 127. A company wants to connect its corporate data center to several AWS VPCs using a centralized network hub. Which architecture is most appropriate?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Separate VPC peering connections for every VPC<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Transit Gateway with Direct Connect or VPN connectivity<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> CloudFront with multiple origins<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> S3 gateway endpoints<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Transit Gateway with Direct Connect or VPN connectivity<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Transit Gateway can serve as a centralized network hub for connecting multiple VPCs and hybrid networks. An organization can attach VPCs to the Transit Gateway and connect its corporate data center through Site-to-Site VPN or an appropriate Direct Connect architecture. This avoids building a large mesh of independent connections between every VPC and the data center. Transit Gateway route tables can be used to control which VPCs and network environments can communicate. This architecture is particularly useful as the number of VPCs grows because the centralized hub simplifies routing, segmentation, and operational management compared with maintaining many individual point-to-point connections.<\/span><\/p>\n<h3><b>Question 128. Which AWS service can provide a dedicated connection between an on-premises network and AWS without relying entirely on the public internet?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Direct Connect<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon CloudFront<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS WAF<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon Route 53<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS Direct Connect<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS Direct Connect provides a dedicated network connection between an on-premises environment and AWS through a Direct Connect location. It can provide more consistent network characteristics than connectivity that relies entirely on the public internet. Direct Connect supports different virtual interface types for different connectivity requirements, including private, public, and transit connectivity models. Although Direct Connect provides dedicated connectivity, it does not automatically encrypt application traffic. Organizations requiring encryption may use additional security mechanisms. Direct Connect is especially useful for hybrid workloads that require predictable network performance, high throughput, or persistent private connectivity between enterprise infrastructure and AWS.<\/span><\/p>\n<h3><b>Question 129. What is the main purpose of a Direct Connect public virtual interface?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Access AWS public services using public IP addresses<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Connect directly to private subnet addresses<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Replace a NAT Gateway<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Provide VPC-to-VPC peering<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Access AWS public services using public IP addresses<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Direct Connect public virtual interface allows a customer network to access supported AWS public services using public IP addressing over the Direct Connect connection. This can be useful for organizations that want traffic destined for public AWS services to use their dedicated Direct Connect connectivity rather than routing that traffic across the public internet. A public VIF is different from a private VIF, which is used for private connectivity to VPC resources through the appropriate gateway architecture. A transit VIF is used with Direct Connect Gateway and Transit Gateway designs. Understanding these distinctions helps prevent incorrect Direct Connect configurations.<\/span><\/p>\n<h3><b>Question 130. Which networking mechanism allows a VPC to privately access supported AWS services without requiring an internet gateway or NAT Gateway?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> VPC endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Elastic IP<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Internet Gateway<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Public VIF<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. VPC endpoint<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">VPC endpoints provide private connectivity from a VPC to supported AWS services without requiring traffic to traverse the public internet. Gateway endpoints are available for services such as Amazon S3 and DynamoDB, while interface endpoints use elastic network interfaces and AWS PrivateLink for supported services. This architecture can improve security and reduce unnecessary internet-path dependencies. For example, an application in a private subnet can access S3 through a gateway endpoint without requiring a NAT Gateway. Endpoint policies can also provide additional control over which resources or actions are permitted through certain endpoint configurations.<\/span><\/p>\n<h3><b>Question 131. Which type of VPC endpoint uses elastic network interfaces within the consumer VPC?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Gateway endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Interface endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Internet endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Route endpoint<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Interface endpoint<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Interface VPC endpoints use elastic network interfaces with private IP addresses inside the consumer VPC. They provide private connectivity to supported AWS services and services exposed through AWS PrivateLink. Because the endpoint is represented by network interfaces within selected subnets, security groups can be associated with those interfaces to control traffic. Interface endpoints can support a broad range of services and are particularly useful when applications need private connectivity without traversing the public internet. Gateway endpoints work differently by providing route-table-based connectivity for supported services such as Amazon S3 and DynamoDB rather than creating endpoint network interfaces.<\/span><\/p>\n<h3><b>Question 132. Which VPC endpoint type is specifically available for Amazon S3 and DynamoDB and does not use interface endpoint network interfaces?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Gateway endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Interface endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Transit endpoint<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> VPN endpoint<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Gateway endpoint<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Gateway VPC endpoints provide private connectivity to supported AWS services such as Amazon S3 and DynamoDB. They are configured through route tables rather than by creating elastic network interfaces in each subnet. This makes gateway endpoints different from interface endpoints, which use ENIs and PrivateLink. A gateway endpoint can be particularly useful for workloads in private subnets because traffic destined for the supported service can remain within the AWS network without requiring a NAT Gateway. Endpoint policies can also be used to control access to supported resources. Understanding the distinction between endpoint types is important when designing cost-efficient and secure VPC connectivity.<\/span><\/p>\n<h3><b>Question 133. An organization wants to restrict which S3 buckets can be accessed through an S3 VPC gateway endpoint. Which configuration can provide this additional access control?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Endpoint policy<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Route 53 health check<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> BGP MED<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> CloudFront cache policy<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Endpoint policy<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An endpoint policy can be used with supported VPC endpoints to control access to AWS resources through the endpoint. For an S3 gateway endpoint, administrators can create a policy that restricts which actions and resources are permitted through the endpoint. This provides an additional layer of control beyond IAM permissions and S3 bucket policies. Endpoint policies should be designed carefully so that they do not unintentionally block legitimate application access. They are particularly useful in environments where administrators want private subnet workloads to access only specific AWS resources rather than allowing unrestricted access to every supported service destination.<\/span><\/p>\n<h3><b>Question 134. Which AWS service provides a private connection to a service hosted by another AWS account without exposing the service through a public IP address?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS PrivateLink<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Global Accelerator<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon CloudFront<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Internet Gateway<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS PrivateLink<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS PrivateLink allows a service provider to expose supported services privately to consumers. The consumer accesses the service through an interface VPC endpoint, while the provider exposes the service through an endpoint service. The traffic uses private connectivity rather than requiring public IP addresses or direct VPC peering. This model is especially useful for cross-account service sharing and SaaS architectures where the provider wants to expose a specific application without providing broad network-level access to its VPC. PrivateLink also reduces the dependency on VPC address-space compatibility because the consumer does not need direct routing to the provider&#8217;s private subnet CIDR ranges.<\/span><\/p>\n<h3><b>Question 135. Which network load balancer characteristic makes it suitable for applications requiring very high-performance TCP or UDP traffic handling?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Layer 4 load balancing<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Layer 7 URL rewriting<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> DNS query filtering<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Object caching<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Layer 4 load balancing<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An AWS Network Load Balancer operates primarily at the transport layer and is designed to handle TCP, UDP, and related high-performance network traffic patterns. It can provide static IP addresses and preserve source IP information in appropriate configurations, making it useful for applications that require efficient Layer 4 load balancing. By contrast, an Application Load Balancer operates at Layer 7 and provides features such as host-based and path-based routing for HTTP and HTTPS applications. Choosing between load balancer types depends on application protocols, routing requirements, performance characteristics, and whether advanced application-layer inspection is required.<\/span><\/p>\n<h3><b>Question 136. Which Elastic Load Balancing option is designed to route HTTP requests based on hostnames and URL paths?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Network Load Balancer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Gateway Load Balancer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Application Load Balancer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Classic DNS routing<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Application Load Balancer<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An Application Load Balancer operates at the application layer and supports advanced HTTP and HTTPS routing capabilities. It can route requests based on hostnames, URL paths, HTTP headers, query strings, and other application-level characteristics. This makes it suitable for modern web applications and microservices architectures where different application components need to receive different types of requests. Network Load Balancer operates primarily at Layer 4, while Gateway Load Balancer is designed for virtual network appliances. Selecting an Application Load Balancer is appropriate when routing decisions need to understand HTTP or HTTPS request information rather than only transport-layer attributes.<\/span><\/p>\n<h3><b>Question 137. Which load balancer is specifically designed to distribute traffic across virtual security appliances such as firewalls and intrusion prevention systems?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Application Load Balancer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Network Load Balancer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Gateway Load Balancer<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Classic Load Balancer<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Gateway Load Balancer<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Gateway Load Balancer is designed specifically for deploying and scaling virtual network appliances such as firewalls, intrusion detection systems, intrusion prevention systems, and other security appliances. It combines load balancing with a transparent network gateway model that allows traffic to be directed through appliance fleets. GWLB can distribute traffic across multiple appliance instances and supports architectures where security inspection is centralized or provided as a service. This differs from an Application Load Balancer, which is optimized for HTTP and HTTPS application traffic, and a Network Load Balancer, which is primarily focused on high-performance Layer 4 traffic distribution.<\/span><\/p>\n<h3><b>Question 138. Which AWS service can provide static anycast IP addresses for a global application and route users toward healthy regional endpoints?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Global Accelerator<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon Route 53 Resolver<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Network Firewall<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Transit Gateway<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS Global Accelerator<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS Global Accelerator provides static anycast IP addresses that act as stable global entry points for applications deployed across multiple AWS Regions. Traffic enters the AWS network through an accelerator edge location and is routed toward appropriate endpoints based on health and network performance considerations. This can provide more predictable addressing for clients compared with requiring them to track separate regional endpoint addresses. Global Accelerator supports applications beyond traditional cached web content and can be useful for TCP and UDP workloads. It differs from Route 53 because Global Accelerator operates at the network traffic level after clients connect to the accelerator&#8217;s static IP addresses.<\/span><\/p>\n<h3><b>Question 139. Which Route 53 routing policy can distribute DNS responses across multiple resources using configurable weights?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Weighted routing<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Failover routing<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Geolocation routing<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Simple routing<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Weighted routing<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Weighted routing allows Route 53 to distribute DNS responses among multiple records according to configured relative weights. Organizations can use this capability for controlled traffic distribution, gradual application migrations, testing new versions, or distributing users among multiple endpoints. For example, one environment can receive a smaller percentage of DNS responses while another receives the majority. Weighted routing is different from failover routing, which is designed around primary and secondary resources, and latency-based routing, which selects endpoints according to network latency. Health checks can also be incorporated so that unhealthy resources are removed from consideration when the routing configuration supports them.<\/span><\/p>\n<h3><b>Question 140. Which AWS networking service can provide a centralized view of network topology and connectivity across AWS and on-premises environments?<\/b><\/h3>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Network Manager<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> Amazon S3<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS WAF<\/span><\/li>\n<li><b><\/b><span style=\"font-weight: 400;\"> AWS Certificate Manager<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. AWS Network Manager<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AWS Network Manager provides centralized visibility and management capabilities for network environments that can include AWS infrastructure and connected on-premises networks. It can help administrators visualize network topology, monitor connectivity, and understand relationships among network components. This is particularly useful for organizations operating large hybrid or multi-Region environments where manually tracking network relationships becomes difficult. Network Manager does not replace services such as Transit Gateway, Direct Connect, or Site-to-Site VPN. Instead, it provides management and visibility capabilities across these networking components. Centralized network visibility can help teams troubleshoot connectivity and maintain a clearer understanding of complex enterprise network architectures.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Amazon AWS Certified Advanced Networking &#8211; Specialty ANS-C01 Exam Dumps and Practice Test Dumps &nbsp; Question 121. Which AWS service can be used to analyze the path between two network resources and identify the configuration component preventing connectivity? Amazon CloudWatch AWS Network Firewall VPC Reachability Analyzer Amazon Route 53 Correct Answer: 3. VPC [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15275"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=15275"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15275\/revisions"}],"predecessor-version":[{"id":15303,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15275\/revisions\/15303"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=15275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=15275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=15275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}