ANS-C01 Network Design Practice Question
Exhibit
Refer to the exhibit. VPC Flow Logs record: 2 123456789010 eni-1235abcde 10.0.1.5 10.0.1.8 443 34567 6 10 5000 1620140761 1620140821 ACCEPT OK 2 123456789010 eni-1235abcde 10.0.1.8 10.0.1.5 34567 443 6 12 7000 1620140821 1620140881 ACCEPT OK 2 123456789010 eni-1235abcde 10.0.1.5 203.0.113.5 443 34568 6 8 4000 1620140761 1620140821 ACCEPT OK 2 123456789010 eni-1235abcde 203.0.113.5 10.0.1.5 34568 443 6 10 5000 1620140821 1620140881 ACCEPT OK
Refer to the exhibit. A network engineer is analyzing VPC Flow Logs for an EC2 instance with IP 10.0.1.5. Based on the logs, which statement is true?
⚠ Common exam trap
AWS often tests the misconception that any traffic to a non-RFC 1918 IP automatically implies internet access, but the trap here is that candidates may overlook the ACCEPT status and assume security group blocking, or misinterpret internal IPs as being in the same subnet when they are not.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The instance is communicating with both internal and internet hosts
The VPC Flow Logs show the EC2 instance (10.0.1.5) communicating with both an internal IP (10.0.2.10) on port 443 and an external IP (203.0.113.50) on port 80, with ACCEPT records for both flows. This indicates successful bidirectional traffic to both internal and internet hosts, confirming option D is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The instance is not communicating with the internet
Why it's wrong here
Logs show traffic to 203.0.113.5 (internet).
- ✗
The instance's security group is blocking traffic
Why it's wrong here
All traffic is ACCEPTED.
- ✗
The instance is only communicating with another instance in the same subnet
Why it's wrong here
Also communicates with internet IP.
- ✓
The instance is communicating with both internal and internet hosts
Why this is correct
Logs show internal (10.0.1.8) and internet (203.0.113.5) traffic.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.