AWS Certified Advanced Networking - Specialty Practice Exam: Test Your Knowledge 2025

A company is designing a hybrid cloud architecture that requires a dedicated, private connection between their on-premises data center and AWS with consistent network performance. The connection must support bandwidths up to 10 Gbps and provide a more reliable alternative to internet-based VPN connections. Which AWS service should the network architect recommend?

A financial services company has deployed a three-tier application across multiple Availability Zones in a VPC. They need to implement a solution that allows their application tier to access a managed database service privately without traversing the internet, while ensuring high availability. The database service is offered as an AWS service. What is the MOST appropriate solution?

A multinational corporation needs to connect 15 VPCs across three AWS regions and multiple on-premises data centers. They require centralized management, simplified routing, and the ability to control inter-VPC traffic flows. Network segmentation is critical, with some VPCs needing isolation from others. What architecture should be implemented?

An organization is experiencing intermittent connectivity issues with their AWS Direct Connect connection. They need to implement a backup solution that automatically fails over if the Direct Connect connection becomes unavailable. What is the MOST cost-effective and resilient solution?

A company runs a latency-sensitive trading application that requires sub-millisecond communication between EC2 instances in the same Availability Zone. Which networking feature should be enabled to achieve the lowest possible latency?

A media company needs to distribute large video files to users globally with the lowest latency possible. They want to use their own custom domain and SSL/TLS certificates. The solution must cache content at edge locations worldwide. Which AWS service combination is MOST appropriate?

A network engineer needs to implement a solution where an EC2 instance can communicate with AWS services like S3 and DynamoDB without using an internet gateway or NAT device. The traffic must remain within the AWS network. Which combination of steps achieves this? (Choose the BEST answer)

An organization has configured a Transit Gateway to connect multiple VPCs. They notice that VPC A can communicate with VPC B, but VPC C cannot communicate with either VPC A or B, despite all being attached to the same Transit Gateway. What is the MOST likely cause?

A company is configuring AWS Direct Connect with a private virtual interface (VIF) to access their VPC. They need to advertise their on-premises network prefixes to AWS. Which routing protocol must be configured for BGP peering?

A network administrator needs to implement a solution that allows thousands of customer VPCs to privately access a centralized SaaS application hosted in a single provider VPC. Customers should not need complex networking configurations. What is the MOST scalable solution?

A company has deployed a Network Load Balancer in front of their application servers across multiple Availability Zones. They want to enable cross-zone load balancing. What is the impact of this configuration?

A company's security team requires detailed network traffic logging for all traffic flowing through their VPC for compliance purposes. They need to capture information about IP traffic including source, destination, ports, and protocol. What should be implemented?

A network operations team is troubleshooting connectivity issues between EC2 instances in different subnets. VPC Flow Logs show 'REJECT' status for the traffic. What are the possible causes? (Choose the BEST answer that covers the most common scenarios)

A company uses AWS Direct Connect to connect their on-premises network to AWS. They need to monitor the connection health and be alerted if the BGP session goes down or if the connection throughput drops below a certain threshold. What AWS service should they use?

A global enterprise is using AWS Transit Gateway to connect multiple VPCs across different regions. They need to implement a monitoring solution that provides visibility into the traffic flowing through their Transit Gateways, including bytes transferred and packet counts. What should they configure?

A healthcare company must ensure that all data transmitted between their VPC and on-premises data center is encrypted in transit to comply with HIPAA requirements. They are using AWS Direct Connect. What solution provides encryption for Direct Connect traffic?

A financial institution needs to implement strict network segmentation in their AWS environment. They want to ensure that their development VPC cannot communicate with their production VPC under any circumstances, while both VPCs need access to a shared services VPC. Using AWS Transit Gateway, how should this be configured?

A company wants to implement DDoS protection for their public-facing web application hosted on AWS. The application uses Application Load Balancer and Amazon CloudFront. What AWS service provides automatic DDoS protection at no additional cost?

A company needs to inspect and filter traffic between their VPC and the internet for threats and malicious content. They require features like intrusion prevention, URL filtering, and the ability to apply custom rules. The solution must be highly available across multiple Availability Zones. What AWS service should be implemented?

A security team needs to ensure that EC2 instances in private subnets cannot be assigned public IP addresses under any circumstances, as part of their compliance requirements. What is the most effective way to enforce this at the subnet level?