Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
ANS-C01 Network Management and Operations Practice Question
Arrange the steps to configure an AWS Client VPN endpoint for remote access:
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
First create server and client certificates, then create the Client VPN endpoint, then associate the endpoint with a target network, then authorize ingress rules, then download and distribute the client configuration.
First create certificates, then the endpoint, associate with network, authorize access, then distribute client config.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
First create server and client certificates, then create the Client VPN endpoint, then associate the endpoint with a target network, then authorize ingress rules, then download and distribute the client configuration.
Why this is correct
This is the correct order because certificates must be created first to use when creating the endpoint. The endpoint must be associated with a network before authorizing rules, and the client configuration is distributed last after the endpoint is fully configured.
- ✗
First create the Client VPN endpoint, then create server and client certificates, then associate with a target network, then authorize ingress rules, then distribute client configuration.
Why it's wrong here
This is incorrect because you need certificates before creating the endpoint; the endpoint requires certificate ARN at creation. Creating the endpoint first without certificates is impossible.
- ✗
First create server and client certificates, then create the Client VPN endpoint, then authorize ingress rules, then associate with a target network, then distribute client configuration.
Why it's wrong here
This is incorrect because you must associate the endpoint with a target network before authorizing ingress rules; authorization rules apply to the network association.
- ✗
First create the Client VPN endpoint, then associate with a target network, then create server and client certificates, then authorize ingress rules, then distribute client configuration.
Why it's wrong here
This is incorrect because the endpoint requires certificates at creation; you cannot create the endpoint before having certificates. Also, authorizing before associating is wrong.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.