Skip to main content
Networking ⭐ Premium ⭐ Featured

AWS Certified Advanced Networking Specialty (ANS-C01)

By Webmaster Certland English 📝 340 questions ❤️ 0 likes

Practice exam for the AWS Certified Advanced Networking Specialty (ANS-C01). Covers network design, implementation, management and operation, and network security, compliance, and governance on AWS.

⭐ Premium Updated Mar 2026

Unlock all 340 AWS Certified Advanced Networking Specialty (ANS-C01) questions

Full simulation · Detailed explanations · Unlimited attempts

  • 340 questions — ~5 full-length simulations
  • Detailed explanations — why each answer is right or wrong
  • Unlimited attempts — retake as many times as needed
  • Smart Practice + Focus Mode + no ads
340
Questions
All certifications
from $4.90/mo
⭐ Get Premium — $4.90/mo ▶ Try 5 questions free

Sample Questions — AWS Certified Advanced Networking Specialty (ANS-C01)

5 free sample questions from this practice exam. Correct answers are highlighted.

1. A company hosts a static website in an Amazon S3 bucket and uses Amazon CloudFront to deliver content globally. The security team requires that users cannot access the S3 bucket directly through S3 URLs — all requests must be routed through CloudFront. Which configuration achieves this requirement with the least operational overhead?

A Configure an Origin Access Identity (OAI) and attach it to the CloudFront distribution
B Configure Origin Access Control (OAC) on the CloudFront distribution and update the S3 bucket policy to allow access only from the CloudFront service principal ✓ Correct
C Enable public read access on the S3 bucket and configure CloudFront to cache all responses
D Add an S3 bucket policy that restricts access to the CloudFront IP address ranges using aws:SourceIp conditions

2. A company wants to serve dynamic web content through Amazon CloudFront. The content differs based on the value of a custom HTTP request header named X-User-Tier. The company needs CloudFront to cache separate versions of each object for each unique value of this header. What should a network engineer configure to achieve this?

A Create a CloudFront cache policy that includes the X-User-Tier header in the cache key ✓ Correct
B Create a CloudFront origin request policy that includes the X-User-Tier header
C Create a CloudFront response headers policy that includes the X-User-Tier header
D Deploy a Lambda@Edge function at the viewer request event to rewrite the URL based on the X-User-Tier header value

3. A company uses BGP routing for their AWS Site-to-Site VPN. The on-premises team is advertising the prefix 10.0.0.0/8 via BGP. However, the company wants AWS to prefer a more specific route (10.1.0.0/16) when routing traffic to a specific subnet. Which BGP principle governs this behavior?

A BGP longest prefix match — the more specific /16 prefix is always preferred over the less specific /8 prefix ✓ Correct
B BGP LOCAL_PREF — the higher local preference value on the /16 route causes it to be preferred
C BGP AS_PATH prepending — adding AS path prepends to the /8 route makes the /16 preferred
D BGP MED — setting a lower MED value on the /16 route causes it to be preferred

4. A network engineer needs to establish a Direct Connect connection to AWS. The organization requires a dedicated 10 Gbps connection with full control over the physical port on the AWS side. Which type of Direct Connect connection should the engineer provision?

A Provision a dedicated Direct Connect connection at 10 Gbps directly through AWS. ✓ Correct
B Provision a hosted Direct Connect connection at 10 Gbps through an AWS Direct Connect Partner.
C Create a hosted virtual interface (VIF) with 10 Gbps bandwidth through an AWS Direct Connect Partner.
D Create a transit virtual interface (VIF) at 10 Gbps on an existing Direct Connect connection.

5. A company is using a hosted Direct Connect connection from an AWS Partner. They need 500 Mbps of bandwidth but are concerned about future growth. What is the maximum speed available for a hosted Direct Connect connection?

A 1 Gbps
B 5 Gbps
C 10 Gbps ✓ Correct
D 100 Gbps

Want to test yourself for real?

Create a free account and run our exam simulation engine.

Free No credit card
  • Simulation engine
  • Up to 10 questions per attempt
  • Score & basic stats
Create free account Already have an account? Sign in
Best
Premium Premium
  • All 340 questions
  • Detailed explanations
  • Smart Practice + Focus Mode
⭐ Get Premium

Information

Questions 340
Time 2h 50min
Difficulty Hard
Minimum Score 75.00%
▶ Try 5 questions — no account needed ⭐ Unlock all questions — Premium 🤍 Like

💰 ROI

Official exam $300.00
CertLand $4.90/mo
Prepare for $300 for less than a coffee/mo

Study Guides & Articles

Free

How to Pass AWS Advanced Networking Specialty (ANS-C01) in 2026: Complete Study Guide

Complete study guide for the AWS Certified Advanced Networking Specialty (ANS-C01) exam. Covers all 4 domains, VPC design, Transit Gateway, Direct Connect, BGP, and an 8-week study plan.
⭐ Premium

AWS Advanced Networking Deep Dive: Transit Gateway, Direct Connect, and Hybrid Design

Deep technical dive into Transit Gateway route tables, Direct Connect Virtual Interfaces, BGP routing attributes, and hybrid network design for the ANS-C01 exam.
⭐ Premium

AWS Advanced Networking Exam Traps: BGP, VPC Endpoints, and Route 53 Resolver

The tricky ANS-C01 distinctions that eliminate candidates: Interface vs Gateway endpoints, Route 53 Resolver endpoints, BGP AS path prepending, DX+VPN failover asymmetry, and Network Firewall rule ordering.

Related Exams

⭐ Premium

Designing and Implementing Microsoft Azure Networking Solutions (AZ-700)

340 questions · English
⭐ Premium

CompTIA Network+ (N10-009)

340 questions · English
⭐ Premium

Google Cloud Professional Cloud Network Engineer (PCNE)

340 questions · English
⭐ Premium

Cisco CCNA (200-301)

340 questions · English

Discussion

No comments yet. Be the first to start the discussion!

Sign in to join the discussion.