20+ practice questions focused on Network Implementation — one of the most tested topics on the AWS Certified Advanced Networking Specialty ANS-C01 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Network Implementation PracticeA company has a Direct Connect connection with a private VIF connected to a VPC. The company wants to add a second Direct Connect connection for redundancy. They plan to use BGP AS_PATH prepending to influence traffic steering so that the primary connection is preferred for inbound traffic. The on-premises router advertises the same prefix over both connections. The company configures BGP on the primary VIF with AS_PATH prepending (prepend two AS numbers). However, after configuration, inbound traffic still uses both paths equally. What is the most likely cause?
Explanation: AS_PATH prepending on the AWS side (the VIF) affects the AS_PATH attribute of routes that AWS advertises to the on-premises router. However, these routes are used by the on-premises router for outbound traffic from the on-premises network to AWS, not for inbound traffic from AWS to on-prem. Inbound traffic (from AWS to on-prem) is controlled by the BGP routes that AWS receives from the on-premises router, which are not affected by the prepending on the AWS side. Therefore, the prepending does not influence inbound traffic steering, and both paths are still used equally for inbound traffic.
A company is migrating a legacy application to AWS. The application requires multicast communication between EC2 instances in the same VPC. Which THREE options can support this requirement? (Choose three.)
Explanation: AWS Transit Gateway supports multicast through dedicated multicast domains, allowing EC2 instances in attached subnets and VPCs to participate in multicast groups. This is a native AWS capability. Additionally, deploying a third-party virtual appliance that supports multicast routing in the VPC enables multicast traffic forwarding. However, AWS VPCs do not natively support multicast traffic, even within a single subnet, so option D is not valid. Direct Connect and VPC peering also do not support multicast due to AWS network restrictions.
A network engineer is troubleshooting connectivity between two VPCs (VPC-A and VPC-B) connected via a VPC peering connection. Both VPCs have CIDR blocks: VPC-A = 10.0.0.0/16, VPC-B = 10.1.0.0/16. An EC2 instance in VPC-A (10.0.1.10) cannot ping an EC2 instance in VPC-B (10.1.1.10). Security groups and NACLs allow all traffic. The route tables are configured as follows: In VPC-A, a route to 10.1.0.0/16 via the peering connection. In VPC-B, a route to 10.0.0.0/16 via the peering connection. What is the most likely cause?
Explanation: The most likely cause is that the route tables containing the peering routes are not associated with the subnets where the EC2 instances are located. In AWS, each subnet must have an associated route table. If the main route table has the peering routes but the subnet's custom route table does not, the traffic will not be routed correctly. Since security groups and NACLs allow all traffic and the CIDRs are not overlapping, the only remaining possibility is a route table association issue.
A company is deploying a multi-tier web application in a VPC with public and private subnets. The web servers in the public subnets must be able to initiate outbound connections to the internet for software updates, but must not be directly accessible from the internet. Which configuration meets these requirements?
Explanation: For instances in public subnets, outbound internet access is provided by attaching an Internet Gateway (IGW) to the VPC and adding a default route to the IGW in the public subnet's route table. To prevent direct inbound access, you use security groups or network ACLs to block incoming traffic. Option C correctly describes this configuration. Option D is for private subnets, where instances need a NAT Gateway for outbound access and must not have public IPs, which contradicts the stem stating the web servers are in public subnets. Options A and B are incorrect because NAT instances and ALBs are not used for providing outbound internet access from public subnets directly.
A company has a Direct Connect connection with a private VIF to a VPC. The on-premises network uses BGP to advertise a specific prefix (10.0.0.0/16) to the VPC. Recently, the company deployed a new VPC with CIDR 10.0.0.0/16 in a different region and established a VPC peering connection between the two VPCs. Now, traffic from on-premises to the new VPC is being routed to the old VPC instead. How should the company resolve this issue?
Explanation: The issue is overlapping CIDR blocks (both VPCs use 10.0.0.0/16). VPC peering requires non-overlapping CIDRs. The Direct Connect route for 10.0.0.0/16 causes traffic destined to the new VPC to be sent to the old VPC. Deleting the peering and using a VPN to connect on-premises to the new VPC resolves this because VPNs can handle overlapping CIDRs with separate routing configurations. Option A is correct. Option B is not feasible because the new VPC is not directly connected to Direct Connect; the on-premises router cannot advertise a more specific prefix for the new VPC over the existing Direct Connect. Option C is incorrect because VPC peering does not propagate routes to Direct Connect virtual interfaces. Option D is incorrect because disabling route propagation and adding static routes in the VPC does not change the on-premises BGP routing.
+15 more Network Implementation questions available
Practice all Network Implementation questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Network Implementation. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Network Implementation questions on the ANS-C01 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Network Implementation is tested as part of the AWS Certified Advanced Networking Specialty ANS-C01 blueprint. Practicing with targeted Network Implementation questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free ANS-C01 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Network Implementation is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Network Implementation practice session with instant scoring and detailed explanations.
Start Network Implementation Practice →