ANS-C01 Network Implementation Practice Question
Which TWO of the following are true about AWS VPC endpoints? (Choose two.)
⚠ Common exam trap
It's easy for candidates to confuse Gateway Endpoints with Interface Endpoints, assuming both use PrivateLink or that Gateway Endpoints support more than just S3 and DynamoDB.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Gateway Endpoints can be used to access Amazon S3 and DynamoDB.
Gateway VPC endpoints allow private connectivity to Amazon S3 and DynamoDB without traversing the internet, using route table entries rather than private IP addresses. This is the only AWS service pair supported by Gateway Endpoints, making them a cost-effective and simple solution for these two services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Gateway Endpoints can be used to access Amazon S3 and DynamoDB.
Why this is correct
Only S3 and DynamoDB have Gateway Endpoints.
- ✗
Interface Endpoints are free of charge.
Why it's wrong here
There are hourly charges and data processing fees.
- ✗
Gateway Endpoints use AWS PrivateLink.
Why it's wrong here
Gateway Endpoints are route-based; PrivateLink is used for Interface Endpoints.
- ✗
Both Gateway and Interface Endpoints require a NAT gateway.
Why it's wrong here
Endpoints work without NAT; they provide private connectivity.
- ✓
Interface Endpoints are powered by AWS PrivateLink.
Why this is correct
PrivateLink enables Interface Endpoints.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.