Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 241 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01

Question #: 241
Topic #: 1

[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company’s data center is connected to a single AWS Region by an AWS Direct Connect dedicated connection. The company has a single VPC in the Region. The company stores logs for all its applications locally in the data center.

The company must keep all application logs for 7 years. The company decides to copy all application logs to an Amazon S3 bucket.

Which solution will meet these requirements?

A. Create a public VIF on the Direct Connect connection. Create an Amazon S3 gateway endpoint in the VPC.
B. Create a private VIF on the Direct Connect connection. Create an Amazon S3 gateway endpoint in the VPC.
C. Create a private VIF on the Direct Connect connection. Create an Amazon S3 interface endpoint in the VPC.
D. Create a public VIF on the Direct Connect connection. Create an Amazon S3 interface endpoint in the VPC.

Show Suggested Answer

Suggested Answer: C 🗳️

by c1193d4 at Jan. 6, 2025, 4:30 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

matanasov

1 month, 1 week ago

Selected Answer: C

Private VIF - Used to access VPC resources (including VPC endpoints) over private IPs from on-premises. Interface endpoints for Amazon S3 - Allow access from on premises

upvoted 1 times

...

ashk123456

2 months, 4 weeks ago

Selected Answer: B

Private Virtual Interface (VIF): A private VIF is used to access AWS services like Amazon S3 through your VPC. It enables private connectivity between your on-premises data center and your VPC over Direct Connect. S3 Gateway Endpoint: This is the appropriate endpoint type for Amazon S3. Gateway endpoints are the recommended way to connect to S3 from a VPC as they use route tables to direct traffic over the AWS private network to S3 without traversing the internet.

upvoted 1 times

...

siheom

3 months, 1 week ago

Selected Answer: B

vote B

upvoted 1 times

...

zanhsieh

3 months, 2 weeks ago

Selected Answer: B

I pick B. All options can access S3. GW endpoint is free but interface endpoint isn't. Security wise we will pick private VIF not public VIF, and pick GW endpoint not interface endpoint.

upvoted 3 times

...

secdaddy

4 months, 4 weeks ago

Selected Answer: A

How about (A) that has an S3 gateway (preferred as free) endpoint providing S3 for inside the VPC and the public VIF providing S3 service for the DC across DX.

upvoted 2 times

...

woorkim

5 months, 2 weeks ago

Selected Answer: C

https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html you allow in-VPC applications to continue accessing Amazon S3 through the gateway endpoint, which is not billed. Then, only your on-premises applications would use interface endpoints to access Amazon S3.

upvoted 3 times

secdaddy

4 months, 4 weeks ago

Private VIF doesn't provide S3 to onprem ?

upvoted 1 times

...

kowal_001

5 months, 3 weeks ago

Selected Answer: C

Interface Endpoint for Amazon S3: Unlike gateway endpoints, interface endpoints (using AWS PrivateLink) are accessible from both inside the VPC and from external sources such as an AWS Direct Connect connection or VPN. This makes the interface endpoint the right choice when the application logs stored locally in the data center need to be uploaded to S3 over the Direct Connect connection.

upvoted 1 times

...

c1193d4

5 months, 3 weeks ago

Selected Answer: C

C: because gateway endpoints are not accessible from sources outside the VPC (like DX)

upvoted 2 times

...