[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-436813-105":59,"doc-detail-436813-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","aws-certified-advanced-networking-specialty-sample-questions","AWS Certified Advanced Networking Specialty - Sample Questions","","Practice questions for the AWS Certified Advanced Networking – Specialty exam, covering advanced networking design and security patterns on AWS. Topics include filtering bidirectional gRPC traffic with AWS Global Accelerator plus appropriate load balancers, implementing split-view DNS with Route 53 Resolver and hosted zones, selecting the correct ELB type and TLS/HTTPS listener behavior for client-certificate authentication, and connecting on-premises data to Amazon S3 securely using Direct Connect with highly available access through S3 endpoints and proxy options.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/aws-certified-advanced-networking-specialty-sample-questions/436813/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/aws-certified-advanced-networking-specialty-sample-questions/436813.png","ImageObject",300,407,{"name":92,"@type":93},"Rowan","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-12","2026-09-29",true,{"@type":102,"interactionType":103,"userInteractionCount":29},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Which option filters incoming traffic by source IP for a gRPC game backend hosted in an Auto Scaling group?","Question",{"text":112,"@type":113},"Use AWS Global Accelerator with a Network Load Balancer, attach the NLB to the Auto Scaling group, and filter based on the source IP using security groups on the EC2 instances.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"How can the same domain name work both internally and externally for a website across multiple VPCs?",{"text":117,"@type":113},"Create Route 53 Resolver endpoints and use a combination of private and public hosted zones so internal queries resolve to internal endpoints while external queries resolve publicly.",{"name":119,"@type":110,"acceptedAnswer":120},"For confidential data on EC2 where the application authenticates clients using TLS client certificates during the initial handshake, which ELB solution fits?",{"text":121,"@type":113},"Choose a Network Load Balancer with a TLS listener on port 443, terminate TLS at the NLB, and configure TLS for the target group.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},436813,1791314886,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":29,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":39,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":46},1099514067415,"https://ap-avatar.wpscdn.com/avatar/100002539d78ffe74a7?x-image-process=image/resize,m_fixed,w_180,h_180&k=1779092875211072502","1) A gaming company is planning to launch a globally available game that is hosted in one AWS Region. The game backend is hosted on Amazon EC2 instances that are part of an Auto Scaling group. The game uses the gRPC protocol for bidirectional streaming between game clients and the backend. The company needs to filter incoming traffic based on the source IP address to protect the game.  \nWhich solution will meet these requirements?  \nA) Configure an AWS Global Accelerator accelerator with an Application Load Balancer (ALB) endpoint.  \nAttach the ALB to the Auto Scaling group. Configure an AWS WAF web ACL for the ALB to filter traffic based on the source IP address.  \nB) Configure an AWS Global Accelerator accelerator with a Network Load Balancer (NLB) endpoint. Attach the NLB to the Auto Scaling group. Configure security groups for the EC2 instances to filter traffic based on the source IP address.  \nC) Configure an Amazon CloudFront distribution with an Application Load Balancer (ALB) endpoint. Attach the ALB to the Auto Scaling group. Configure an AWS WAF web ACL for the ALB to filter traffic based on the source IP address.  \nD) Configure an Amazon CloudFront distribution with a Network Load Balancer (NLB) endpoint. Attach the NLB to the Auto Scaling group. Configure security groups for the EC2 instances to filter traffic based on the source IP address.  \n2) A company has multiple VPCs in the us-east-1 Region. The company has deployed a website in one of the VPCs. The company wants to implement split-view DNS so that the website is accessible internally from the VPCs and externally over the internet with the same domain name, [example.com](example.com).  \nWhich solution will meet these requirements?  \nA) Change the DHCP options for each VPC to use the IP address of an on-premises DNS server. Create a private hosted zone and a public hosted [zone for example.com. Map the](zone for example.com. Map the) private hosted zone to the website's internal IP address. Map the public hosted zone to the website's external IP address.  \nB) Create Amazon Route 53 private hosted zones and public hosted zones that have the same name, [example.com. Associate the VPCs with](example.com. Associate the VPCs with) the private hosted zone. Create records in each hosted zone that determine how traffic is routed.  \nC) Create an Amazon Route 53 Resolver inbound endpoint for resolving [example.com](example.com) internally. Create a Route 53 public hosted zone for routing external DNS queries.  \nD) Create an Amazon Route 53 Resolver outbound endpoint for resolving [example.com](example.com) externally. Create a Route 53 private hosted zone for routing internal DNS queries.  \n3) A company has developed a new web application that processes confidential data that is hosted on Amazon EC2 instances. The application needs to scale and must use certificates to authenticate clients. The application is configured to request a client's certificate and will validate the certificate as part of the initial handshake.  \nWhich Elastic Load Balancing (ELB) solution will meet these requirements?  \nA) Configure an Application Load Balancer (ALB) that includes an [HTTPS listener on](HTTPS listener on) port 443. Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group as the target group of the ALB. Configure [HTTPS as](HTTPS as) the protocol for the target group.  \nB) Configure a Network Load Balancer (NLB) that includes a TLS listener on port 443. Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group as the target group of the NLB. Configure the NLB to terminate TLS. Configure TLS as the protocol for the target group.  \nC) Configure a Network Load Balancer (NLB) that includes a TCP listener on port 443. Create an Auto Scaling group for the EC2 instances. Configure the Auto Scaling group as the target group of the NLB. Configure TCP as the protocol for the target group.  \nD) Configure an Application Load Balancer","cbCaisf0bq6wHggc","https://ap.wps.com/l/cbCaisf0bq6wHggc","pdf",208692,"English","# Exam Practice Questions\n## Global Accelerator and traffic filtering\n## Split-view DNS with Route 53\n## ELB choice for client certificate authentication\n## Direct Connect to S3 migration with endpoints","[{\"question\":\"Which option filters incoming traffic by source IP for a gRPC game backend hosted in an Auto Scaling group?\",\"answer\":\"Use AWS Global Accelerator with a Network Load Balancer, attach the NLB to the Auto Scaling group, and filter based on the source IP using security groups on the EC2 instances.\"},{\"question\":\"How can the same domain name work both internally and externally for a website across multiple VPCs?\",\"answer\":\"Create Route 53 Resolver endpoints and use a combination of private and public hosted zones so internal queries resolve to internal endpoints while external queries resolve publicly.\"},{\"question\":\"For confidential data on EC2 where the application authenticates clients using TLS client certificates during the initial handshake, which ELB solution fits?\",\"answer\":\"Choose a Network Load Balancer with a TLS listener on port 443, terminate TLS at the NLB, and configure TLS for the target group.\"}]","AWS Certified Advanced Networking Specialty - Sample Questions | PDF",1790679136]