ANS-C01 Network Design Practice Question
A company is designing a network for a critical application that requires an SLA of 99.99% availability. The application runs on EC2 instances in an Auto Scaling group across three Availability Zones. The company needs to ensure that the network design meets the SLA. Which THREE components should the company include? (Choose THREE.)
⚠ Common exam trap
The ANS-C01 exam often tests the misconception that a single Direct Connect or VPN connection is sufficient for high availability, but the trap here is that 99.99% SLA requires redundancy at every layer, including network connectivity, so a single connection is a single point of failure regardless of its reliability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A NAT gateway in each Availability Zone for outbound internet access.
A NAT gateway in each Availability Zone ensures that outbound internet traffic remains within the same AZ, preventing cross-AZ data transfer costs and avoiding a single point of failure. This design supports the 99.99% SLA by maintaining high availability for outbound connectivity, as each AZ can independently handle its own traffic without relying on a shared resource.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A single AWS Direct Connect connection for all inbound traffic.
Why it's wrong here
Single Direct Connect is a single point of failure.
- ✓
A NAT gateway in each Availability Zone for outbound internet access.
Why this is correct
NAT gateways per AZ eliminate single point of failure.
- ✗
A single AWS Site-to-Site VPN connection for administrative access.
Why it's wrong here
Single VPN is not highly available.
- ✓
VPC endpoints for AWS services used by the application.
Why this is correct
VPC endpoints keep traffic within AWS network.
- ✓
An Application Load Balancer (ALB) configured to route traffic to instances in all three Availability Zones.
Why this is correct
ALB distributes traffic across AZs for high availability.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.