ANS-C01 Network Management and Operations Practice Question
Network Topology
A network engineer has created a VPC endpoint for a VPC endpoint service. The endpoint is 'available' but the application cannot connect to the service using the private DNS name. The engineer checks the Route 53 private hosted zone and finds that no record exists for the endpoint. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'PrivateDnsEnabled' flag is set to false on the VPC endpoint
When the 'PrivateDnsEnabled' flag is set to false on a VPC endpoint, AWS does not automatically create a Route 53 private hosted zone for the endpoint, so the private DNS name does not resolve. This is the most likely cause given that no DNS record exists. Option D is correct. Options A, B, and C could cause connectivity issues but would not prevent the DNS record from being created.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The VPC endpoint service is not accepting connections
Why it's wrong here
The endpoint is in 'available' state, so the service is accepting.
- ✗
The VPC endpoint policy is blocking connectivity
Why it's wrong here
Policy would affect access after DNS resolution, not DNS resolution itself.
- ✗
The security group for the endpoint does not allow inbound traffic
Why it's wrong here
Security groups affect traffic, not DNS resolution.
- ✓
The 'PrivateDnsEnabled' flag is set to false on the VPC endpoint
Why this is correct
If private DNS is not enabled, Route 53 does not automatically create records for the endpoint.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.