{"id":15277,"date":"2026-09-17T11:23:18","date_gmt":"2026-09-17T11:23:18","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=15277"},"modified":"2026-09-17T11:23:18","modified_gmt":"2026-09-17T11:23:18","slug":"amazon-aws-certified-advanced-networking-specialty-ans-c01-practice-test-questions-and-exam-dumps-part-9-q161-180","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-advanced-networking-specialty-ans-c01-practice-test-questions-and-exam-dumps-part-9-q161-180\/","title":{"rendered":"Amazon AWS Certified Advanced Networking – Specialty ANS-C01 Practice Test Questions and Exam Dumps Part 9 Q161-180"},"content":{"rendered":"

<\/h1>\n

View Full <\/b>Amazon AWS Certified Advanced Networking – Specialty ANS-C01 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/p>\n

 <\/p>\n

Question 161. Which BGP attribute can be used to influence outbound traffic from an AWS network toward a specific on-premises network when multiple routes are available?<\/b><\/h3>\n
    \n
  1. <\/b> MED<\/span><\/li>\n
  2. <\/b> AS_PATH<\/span><\/li>\n
  3. <\/b> Local preference<\/span><\/li>\n
  4. <\/b> Origin<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3. Local preference<\/b><\/p>\n

    Explanation:<\/b><\/p>\n

    Local preference is a BGP attribute commonly used within an autonomous system to influence which outbound path is selected for traffic leaving that network. A higher local preference is generally preferred, allowing network administrators to designate a preferred exit path when multiple routes are available. In AWS hybrid networking, this can be useful when an organization has redundant Direct Connect or VPN connectivity and wants to control which connection should normally carry outbound traffic. Local preference is typically evaluated inside the organization\u2019s routing domain, whereas MED is more commonly used to influence inbound path selection from a neighboring autonomous system. Understanding the direction of traffic influenced by each BGP attribute is important when designing resilient hybrid AWS networks.<\/span><\/p>\n

    Question 162. A company has two AWS Direct Connect connections to the same AWS Region and wants both connections to actively carry traffic while providing redundancy. Which capability can help distribute traffic across the available paths?<\/b><\/h3>\n
      \n
    1. <\/b> ECMP<\/span><\/li>\n
    2. <\/b> DNS failover only<\/span><\/li>\n
    3. <\/b> NAT Gateway<\/span><\/li>\n
    4. <\/b> Route 53 geolocation routing<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1. ECMP<\/b><\/p>\n

      Explanation:<\/b><\/p>\n

      Equal-Cost Multi-Path (ECMP) routing allows traffic to use multiple routing paths that have equivalent routing characteristics. In AWS networking architectures, ECMP can be useful when an organization wants multiple VPN or Transit Gateway connectivity paths to participate in traffic forwarding rather than keeping one path completely idle as a backup. The exact applicability depends on the attachment type, routing design, and AWS service capabilities involved. When supported, ECMP improves utilization and can provide path redundancy because traffic can be distributed across multiple equivalent paths. This is different from DNS-based routing, which influences how clients resolve names rather than directly performing packet-level load sharing across network paths.<\/span><\/p>\n

      Question 163. Which AWS Direct Connect feature allows an organization to use a Direct Connect connection through a third-party provider rather than establishing a dedicated physical connection directly to AWS?<\/b><\/h3>\n
        \n
      1. <\/b> Public VIF<\/span><\/li>\n
      2. <\/b> Hosted connection<\/span><\/li>\n
      3. <\/b> Transit gateway attachment<\/span><\/li>\n
      4. <\/b> Internet gateway<\/span><\/li>\n<\/ol>\n

        Correct Answer: 2. Hosted connection<\/b><\/p>\n

        Explanation:<\/b><\/p>\n

        A hosted connection is a Direct Connect connectivity model in which an AWS Direct Connect partner provides connectivity to AWS on behalf of the customer. This can be useful when an organization does not want to establish and manage a dedicated physical Direct Connect connection at an AWS Direct Connect location. The provider supplies the underlying connectivity, while the customer can configure supported virtual interfaces according to the connectivity model. Hosted connections can simplify deployment and provide access to AWS Direct Connect capabilities through a connectivity provider. They are particularly relevant for organizations that need hybrid connectivity but have operational, geographic, or infrastructure constraints that make a directly provisioned dedicated connection less convenient.<\/span><\/p>\n

        Question 164. Which Direct Connect virtual interface type is designed to provide connectivity to resources in a VPC through a Direct Connect gateway or associated private connectivity architecture?<\/b><\/h3>\n
          \n
        1. <\/b> Public VIF<\/span><\/li>\n
        2. <\/b> Transit VIF<\/span><\/li>\n
        3. <\/b> Private VIF<\/span><\/li>\n
        4. <\/b> Internet VIF<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3. Private VIF<\/b><\/p>\n

          Explanation:<\/b><\/p>\n

          A private virtual interface (private VIF) is used for private connectivity between an on-premises network and AWS resources through Direct Connect. It is commonly associated with connectivity to a VPC through a virtual private gateway or, through supported architectures, a Direct Connect gateway. A private VIF uses private IP addressing and BGP to exchange routes between the customer network and AWS. This differs from a public VIF, which is intended for access to AWS public services, and a transit VIF, which is used with a Direct Connect gateway to connect to Transit Gateway environments. Selecting the correct VIF type is essential when designing Direct Connect connectivity for hybrid workloads.<\/span><\/p>\n

          Question 165. An organization wants to prevent its AWS network from advertising overly broad routes to an on-premises environment over BGP. What should the organization primarily configure?<\/b><\/h3>\n
            \n
          1. <\/b> Route filtering and controlled route advertisement<\/span><\/li>\n
          2. <\/b> CloudFront cache policies<\/span><\/li>\n
          3. <\/b> Route 53 weighted records<\/span><\/li>\n
          4. <\/b> Security group outbound rules only<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1. Route filtering and controlled route advertisement<\/b><\/p>\n

            Explanation:<\/b><\/p>\n

            Controlled route advertisement is important in hybrid AWS environments because advertising unnecessarily broad prefixes can create routing conflicts, unexpected traffic paths, or security and operational problems. Organizations should use appropriate routing policies and filters to ensure that only required prefixes are advertised across Direct Connect or VPN connections. For example, a network may advertise specific VPC or Transit Gateway prefixes instead of an unnecessarily broad aggregate. Security groups do not control BGP route advertisements, while Route 53 controls DNS resolution rather than IP routing. Careful route filtering also helps prevent accidental propagation of routes between network domains and makes hybrid routing behavior more predictable and easier to troubleshoot.<\/span><\/p>\n

            Question 166. Which AWS Site-to-Site VPN routing method allows routes to be dynamically exchanged between a customer gateway device and AWS?<\/b><\/h3>\n
              \n
            1. <\/b> Static routing<\/span><\/li>\n
            2. <\/b> Dynamic routing using BGP<\/span><\/li>\n
            3. <\/b> DNS routing<\/span><\/li>\n
            4. <\/b> NAT routing<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2. Dynamic routing using BGP<\/b><\/p>\n

              Explanation:<\/b><\/p>\n

              Dynamic routing with Border Gateway Protocol (BGP) allows the customer gateway and AWS Site-to-Site VPN connection to exchange routing information automatically. This is especially useful in environments with changing network prefixes, multiple VPN connections, or redundant paths because routes can be learned and adjusted without manually maintaining every route on both sides. Static routing, by contrast, requires administrators to explicitly configure the prefixes that should use the VPN connection. BGP also provides mechanisms that can help influence path selection and support failover. For larger hybrid environments, dynamic routing can significantly reduce operational overhead while improving the ability of the network to respond to connectivity changes.<\/span><\/p>\n

              Question 167. A company has a Site-to-Site VPN connection and wants to configure a backup VPN tunnel to improve availability. What is the primary reason AWS provides multiple VPN tunnels for a connection?<\/b><\/h3>\n
                \n
              1. <\/b> To provide tunnel redundancy<\/span><\/li>\n
              2. <\/b> To replace all routing tables<\/span><\/li>\n
              3. <\/b> To eliminate encryption<\/span><\/li>\n
              4. <\/b> To provide DNS caching<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1. To provide tunnel redundancy<\/b><\/p>\n

                Explanation:<\/b><\/p>\n

                AWS Site-to-Site VPN connections provide multiple IPsec tunnels to improve availability and resiliency. If one tunnel experiences a failure, the other tunnel can continue to provide connectivity, assuming the customer gateway and routing configuration are properly designed. This redundancy helps reduce the impact of individual tunnel failures and maintenance events. Administrators should monitor tunnel status and ensure that routing behavior can make effective use of the available paths. Multiple tunnels do not eliminate encryption because IPsec remains an important part of VPN security. They also do not replace VPC route tables or provide DNS caching; their primary networking purpose is to provide resilient encrypted connectivity between AWS and the customer network.<\/span><\/p>\n

                Question 168. Which Transit Gateway attachment type can connect a Transit Gateway to an AWS Site-to-Site VPN connection?<\/b><\/h3>\n
                  \n
                1. <\/b> VPN attachment<\/span><\/li>\n
                2. <\/b> Gateway endpoint<\/span><\/li>\n
                3. <\/b> Interface endpoint<\/span><\/li>\n
                4. <\/b> CloudFront attachment<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1. VPN attachment<\/b><\/p>\n

                  Explanation:<\/b><\/p>\n

                  A VPN attachment allows an AWS Transit Gateway to connect with an AWS Site-to-Site VPN connection. This architecture enables the Transit Gateway to act as a centralized routing hub for multiple VPCs and external networks, including on-premises environments connected through VPN. Instead of creating separate VPN connectivity arrangements for every VPC, organizations can centralize routing through the Transit Gateway. Route tables and propagation controls determine which networks can communicate with one another. Gateway endpoints and interface endpoints serve different purposes, primarily providing private access to AWS services or endpoint services. Understanding Transit Gateway attachment types is fundamental for designing scalable hybrid and multi-VPC architectures.<\/span><\/p>\n

                  Question 169. What is a major advantage of using AWS Transit Gateway Connect for supported network integration scenarios?<\/b><\/h3>\n
                    \n
                  1. <\/b> It provides DNS hosting for public domains<\/span><\/li>\n
                  2. <\/b> It enables integration with network appliances using GRE and BGP<\/span><\/li>\n
                  3. <\/b> It replaces all VPC route tables<\/span><\/li>\n
                  4. <\/b> It provides CDN caching<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2. It enables integration with network appliances using GRE and BGP<\/b><\/p>\n

                    Explanation:<\/b><\/p>\n

                    Transit Gateway Connect is designed to simplify integration between a Transit Gateway and supported network appliances or software-defined networking environments. It uses GRE tunnels to establish connectivity and BGP to exchange routing information dynamically. This can be useful when integrating third-party networking appliances, SD-WAN solutions, or other virtual network infrastructure with a centralized Transit Gateway architecture. Dynamic routing through BGP allows routes to be exchanged without manually configuring every destination prefix. Transit Gateway Connect does not function as a DNS service or content delivery network. Its value comes from extending centralized AWS network connectivity into external or virtualized routing environments using standards-based networking mechanisms.<\/span><\/p>\n

                    Question 170. A network engineer needs to inspect traffic between multiple VPCs using a centralized firewall appliance. Which AWS architecture can support this requirement?<\/b><\/h3>\n
                      \n
                    1. <\/b> Transit Gateway with a centralized inspection VPC<\/span><\/li>\n
                    2. <\/b> Route 53 weighted routing<\/span><\/li>\n
                    3. <\/b> CloudFront without an origin<\/span><\/li>\n
                    4. <\/b> S3 gateway endpoint only<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1. Transit Gateway with a centralized inspection VPC<\/b><\/p>\n

                      Explanation:<\/b><\/p>\n

                      A centralized inspection architecture can use AWS Transit Gateway to route traffic from multiple VPCs through a dedicated inspection VPC containing firewall appliances or AWS network security services. Transit Gateway route tables can be configured so that traffic from workload VPCs is directed toward the inspection environment before reaching the destination VPC or external network. This approach provides a consistent location for security inspection and can simplify policy management across many VPCs. Gateway Load Balancer can also be incorporated when distributing traffic across supported third-party appliances. Proper routing is essential because simply deploying a firewall does not automatically force traffic through it; the Transit Gateway and VPC route configurations must establish the intended traffic path.<\/span><\/p>\n

                      Question 171. Which VPC networking capability allows IPv6-enabled resources to initiate outbound connections to the internet while preventing unsolicited inbound connections initiated from the internet?<\/b><\/h3>\n
                        \n
                      1. <\/b> Internet Gateway only<\/span><\/li>\n
                      2. <\/b> NAT Gateway<\/span><\/li>\n
                      3. <\/b> Egress-only Internet Gateway<\/span><\/li>\n
                      4. <\/b> Gateway Load Balancer<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 3. Egress-only Internet Gateway<\/b><\/p>\n

                        Explanation:<\/b><\/p>\n

                        An egress-only Internet Gateway is designed for IPv6 traffic that needs outbound internet connectivity while preventing unsolicited inbound IPv6 connections from the internet. This differs from an ordinary Internet Gateway, which can support bidirectional internet connectivity when routing and security controls permit it. NAT Gateway is primarily associated with IPv4 address translation for private resources that need outbound internet access. Because IPv6 addresses are globally routable and do not require traditional NAT in the same manner as private IPv4 addresses, the egress-only Internet Gateway provides an appropriate mechanism for controlling inbound initiation. Route tables and security controls still play important roles in determining how traffic flows.<\/span><\/p>\n

                        Question 172. Which VPC feature can provide private DNS names for interface VPC endpoints so applications can access supported AWS services without using public service endpoints?<\/b><\/h3>\n
                          \n
                        1. <\/b> Private DNS<\/span><\/li>\n
                        2. <\/b> Public hosted zone<\/span><\/li>\n
                        3. <\/b> Internet Gateway<\/span><\/li>\n
                        4. <\/b> NAT Gateway<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1. Private DNS<\/b><\/p>\n

                          Explanation:<\/b><\/p>\n

                          Private DNS for an interface VPC endpoint allows applications within a VPC to resolve supported AWS service names to private IP addresses associated with the endpoint network interfaces. This means workloads can access the service without sending traffic through an Internet Gateway or NAT Gateway. Private DNS helps preserve private network paths and can reduce the need for application changes because applications can continue using standard AWS service DNS names. The VPC must have appropriate DNS support and hostname settings, and the endpoint must support the relevant service and configuration. This capability is especially valuable in private subnets where direct public internet connectivity is intentionally restricted.<\/span><\/p>\n

                          Question 173. A company needs to connect on-premises DNS servers with DNS resolvers in AWS so that AWS workloads can resolve internal corporate domain names. Which service feature should be used?<\/b><\/h3>\n
                            \n
                          1. <\/b> Route 53 Resolver inbound endpoint<\/span><\/li>\n
                          2. <\/b> CloudFront distribution<\/span><\/li>\n
                          3. <\/b> Internet Gateway<\/span><\/li>\n
                          4. <\/b> Network Load Balancer<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. Route 53 Resolver inbound endpoint<\/b><\/p>\n

                            Explanation:<\/b><\/p>\n

                            A Route 53 Resolver inbound endpoint allows DNS queries from networks outside a VPC, such as an on-premises corporate network, to be sent to DNS resolvers in AWS. This is useful in hybrid DNS architectures where corporate DNS servers need to resolve names hosted in AWS private hosted zones or otherwise resolvable through the VPC’s DNS resolver. The inbound endpoint uses elastic network interfaces in selected subnets and provides private IP addresses that on-premises DNS servers can query. An outbound Resolver endpoint serves the opposite direction by forwarding DNS queries from AWS toward external DNS servers. Understanding this directional distinction is important when designing hybrid DNS resolution.<\/span><\/p>\n

                            Question 174. Which Route 53 Resolver capability allows DNS queries originating inside a VPC to be forwarded to DNS servers located in an on-premises network?<\/b><\/h3>\n
                              \n
                            1. <\/b> Resolver outbound endpoint<\/span><\/li>\n
                            2. <\/b> Resolver inbound endpoint<\/span><\/li>\n
                            3. <\/b> Route 53 failover record<\/span><\/li>\n
                            4. <\/b> CloudFront origin<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1. Resolver outbound endpoint<\/b><\/p>\n

                              Explanation:<\/b><\/p>\n

                              A Route 53 Resolver outbound endpoint enables DNS queries from AWS VPCs to be forwarded to DNS servers outside AWS, such as corporate DNS infrastructure in an on-premises data center. Forwarding rules determine which domain names should be sent to the external DNS servers. This capability is important for hybrid environments where AWS applications need to resolve internal corporate domains that are not hosted in Route 53. The outbound endpoint is the opposite of an inbound endpoint: inbound endpoints receive DNS queries from external networks into AWS, while outbound endpoints send selected DNS queries from AWS toward external DNS infrastructure. This distinction helps prevent configuration errors in hybrid DNS designs.<\/span><\/p>\n

                              Question 175. Which AWS service can provide centralized visibility into AWS network topology, including relationships among network resources and connectivity?<\/b><\/h3>\n
                                \n
                              1. <\/b> AWS Network Manager<\/span><\/li>\n
                              2. <\/b> Amazon S3<\/span><\/li>\n
                              3. <\/b> AWS Certificate Manager<\/span><\/li>\n
                              4. <\/b> Amazon DynamoDB<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. AWS Network Manager<\/b><\/p>\n

                                Explanation:<\/b><\/p>\n

                                AWS Network Manager provides capabilities for monitoring and managing network infrastructure across AWS and supported external environments. It can help organizations visualize network topology and understand relationships among network resources, connectivity, and hybrid networking components. This is particularly useful for enterprises operating multiple VPCs, Transit Gateways, Regions, and on-premises locations. Centralized visibility can make troubleshooting and operational planning easier because administrators can examine the broader network rather than investigating every component independently. AWS Network Manager does not replace core routing services such as Transit Gateway or Direct Connect; instead, it provides management and visibility capabilities that complement those networking services.<\/span><\/p>\n

                                Question 176. A company wants to prevent traffic from one group of VPCs from reaching another group while still allowing both groups to connect to shared services through a Transit Gateway. Which Transit Gateway feature can help implement this segmentation?<\/b><\/h3>\n
                                  \n
                                1. <\/b> Transit Gateway route tables<\/span><\/li>\n
                                2. <\/b> CloudFront cache behaviors<\/span><\/li>\n
                                3. <\/b> Route 53 geolocation routing<\/span><\/li>\n
                                4. <\/b> NAT Gateway<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1. Transit Gateway route tables<\/b><\/p>\n

                                  Explanation:<\/b><\/p>\n

                                  Transit Gateway route tables can be used to create logical routing domains and control which attachments can communicate with one another. By associating attachments with appropriate Transit Gateway route tables and controlling route propagation, administrators can create segmented network environments. For example, one group of VPCs can be prevented from learning routes to another group while both groups are given routes to shared services or inspection resources. This approach provides centralized routing control without requiring a separate physical router for every network segment. Careful planning of associations and propagations is essential because the resulting connectivity depends on which routes are present in each Transit Gateway route table.<\/span><\/p>\n

                                  Question 177. Which technique can help a network administrator influence the path used by external networks when they connect to an AWS network through multiple BGP-enabled connections?<\/b><\/h3>\n
                                    \n
                                  1. <\/b> AS_PATH prepending<\/span><\/li>\n
                                  2. <\/b> DNS caching<\/span><\/li>\n
                                  3. <\/b> Security group tagging<\/span><\/li>\n
                                  4. <\/b> CloudFront compression<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1. AS_PATH prepending<\/b><\/p>\n

                                    Explanation:<\/b><\/p>\n

                                    AS_PATH prepending is a BGP technique that can influence inbound traffic by making one advertised route appear less attractive to external networks. An administrator can intentionally add additional instances of the autonomous system number to the AS_PATH when advertising a prefix over a less-preferred connection. BGP path selection generally favors a shorter AS_PATH when comparing otherwise suitable routes, so the prepended path may become less preferred. This technique is commonly used in multihomed network designs to influence which connection receives inbound traffic. It should not be confused with local preference, which is generally used within an autonomous system to influence outbound path selection.<\/span><\/p>\n

                                    Question 178. Which AWS networking feature can capture packet-level traffic from an elastic network interface and send mirrored traffic to a monitoring or security appliance?<\/b><\/h3>\n
                                      \n
                                    1. <\/b> VPC Flow Logs<\/span><\/li>\n
                                    2. <\/b> Traffic Mirroring<\/span><\/li>\n
                                    3. <\/b> Route 53 Resolver<\/span><\/li>\n
                                    4. <\/b> AWS Shield<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2. Traffic Mirroring<\/b><\/p>\n

                                      Explanation:<\/b><\/p>\n

                                      VPC Traffic Mirroring allows network traffic from an elastic network interface to be copied and sent to a monitoring or security appliance for deeper packet inspection. This is different from VPC Flow Logs, which provide metadata about network flows rather than complete packet contents. Traffic Mirroring can therefore be useful for intrusion detection, network troubleshooting, forensic analysis, and other security monitoring scenarios where packet-level information is required. The mirrored traffic can be directed toward a suitable monitoring destination, often through a network architecture designed specifically for inspection. Because packet mirroring can generate substantial traffic, administrators should consider performance, bandwidth, and monitoring requirements when deploying it.<\/span><\/p>\n

                                      Question 179. Which VPC feature is most directly responsible for controlling whether an EC2 instance can communicate with resources based on stateful inbound and outbound traffic rules?<\/b><\/h3>\n
                                        \n
                                      1. <\/b> Network ACL<\/span><\/li>\n
                                      2. <\/b> Security group<\/span><\/li>\n
                                      3. <\/b> Route table<\/span><\/li>\n
                                      4. <\/b> Internet Gateway<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2. Security group<\/b><\/p>\n

                                        Explanation:<\/b><\/p>\n

                                        A security group acts as a stateful virtual firewall for supported AWS resources such as EC2 instances. It controls allowed inbound and outbound traffic using rules based on parameters such as protocol, port, and source or destination. Because security groups are stateful, return traffic for an allowed connection is generally permitted automatically, even when a corresponding reverse-direction rule is not explicitly created. Network ACLs operate at the subnet level and are stateless, requiring separate inbound and outbound considerations. Route tables determine where traffic is sent but do not provide the same security filtering function. Understanding these differences is essential when troubleshooting connectivity problems inside a VPC.<\/span><\/p>\n

                                        Question 180. A network architect needs to allow applications in a VPC to privately consume a service hosted by another organization without exposing the service directly to the public internet. Which AWS technology is specifically designed for this model?<\/b><\/h3>\n
                                          \n
                                        1. <\/b> AWS PrivateLink<\/span><\/li>\n
                                        2. <\/b> Amazon CloudFront<\/span><\/li>\n
                                        3. <\/b> Internet Gateway<\/span><\/li>\n
                                        4. <\/b> Route 53 public hosted zone<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1. AWS PrivateLink<\/b><\/p>\n

                                          Explanation:<\/b><\/p>\n

                                          AWS PrivateLink provides private connectivity between VPCs and supported endpoint services without requiring the consumer to establish direct network-level connectivity to the provider’s VPC. A service provider can publish an endpoint service, typically backed by a Network Load Balancer, and authorized consumers can create interface VPC endpoints to access that service privately. This architecture is particularly useful for SaaS providers, shared internal services, and cross-account service consumption. PrivateLink reduces the need for VPC peering or complex routing relationships between consumer and provider environments. It also helps isolate the service provider’s network topology because consumers access the published service rather than receiving broad access to the provider’s VPC.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Amazon AWS Certified Advanced Networking – Specialty ANS-C01 Exam Dumps and Practice Test Dumps   Question 161. Which BGP attribute can be used to influence outbound traffic from an AWS network toward a specific on-premises network when multiple routes are available? MED AS_PATH Local preference Origin Correct Answer: 3. Local preference Explanation: Local […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15277"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=15277"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15277\/revisions"}],"predecessor-version":[{"id":15301,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/15277\/revisions\/15301"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=15277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=15277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=15277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}