AWS Certified Advanced Networking - Specialty (ANS-C01) Exam Dumps with Solutions

A company has two AWS Direct Connect links to its on-premises data center. One Direct Connect link terminates in the `us-east-1` Region, and the other Direct Connect link terminates in the `af-south-1` Region. The company is using BGP to exchange routes with AWS. The company's on-premises environment needs to be configured to use the `us-east-1` link as the primary path to AWS and the `af-south-1` link as the secondary (backup) path. A network engineer must configure BGP on the on-premises router to ensure that the `us-east-1` link is preferred for all traffic to AWS, and the `af-south-1` link is used only if the primary link fails. The solution must use standard BGP attributes and AWS BGP community tags. How should a network engineer configure BGP to ensure that `af-south-1` is used as a secondary link to AWS?

A company's security policy dictates that all outbound traffic from its AWS VPC to the on-premises data center must be inspected by a third-party security appliance. This appliance runs on an Amazon EC2 instance within the VPC. A network engineer has been tasked with improving the network performance between the on-premises data center and this security appliance. The existing connection is a standard VPN over the internet. The performance is currently a bottleneck for the on-premises users. The network engineer must improve the network performance between the on-premises data center and the EC2-based security appliance. The solution should focus on increasing throughput and reducing latency for this specific traffic flow. Which actions should the network engineer take to meet these requirements? (Choose two.)

A company recently implemented a security policy that prohibits developers from launching VPC network infrastructure. The policy states that any time a NAT gateway is launched in a VPC, the company's network security team must immediately receive an alert to terminate the NAT gateway. The network security team needs to implement a solution that can be deployed across AWS accounts with the least possible administrative overhead. The solution also must provide the network security team with a simple way to view compliance history. The solution must be able to detect the creation of a NAT Gateway in any VPC, alert the security team, automatically terminate the resource, and provide a historical record of compliance. The solution must also be easily deployable across multiple AWS accounts with minimal manual effort. Which solution will meet these requirements?

A company is migrating applications from an on-premises data center to AWS, requiring data exchange with an on-premises mainframe. The solution must achieve 4 Gbps transfer speeds for peak traffic and ensure high availability and resiliency against circuit or router failures. Design a highly available, resilient networking solution that supports 4 Gbps and withstands circuit or router failures. Which solution will meet these requirements?

A company uses an AWS Direct Connect private VIF with a Link Aggregation Group (LAG) that consists of two 10 Gbps connections. The company's security team has implemented a new requirement for external network connections to provide layer 2 encryption. The company's network team plans to use MACsec support for Direct Connect to meet the new requirement. The network team must implement MACsec encryption on the existing Direct Connect connection to a private VIF without disrupting service and with the least possible downtime. Which combination of steps should the network team take to implement this functionality? (Choose three.)