Question 1 - Amazon ANS-C01 Real Exam Questions [Jan 2026 Update]

Q: 1

A company's network engineer must implement a cloud-based networking environment for a network operations team to centrally manage. Other teams will use the environment. Each team must be able to deploy infrastructure to the environment and must be able to manage its own resources. The environment must feature IPv4 and IPv6 support and must provide internet connectivity in a dual-stack configuration. The company has an organization in AWS Organizations that contains a workload account for the teams. The network engineer creates a new networking account in the organization. Which combination of steps should the network engineer take next to meet the requirements? (Select THREE.)

Options

Correct Answer:

A, C, E

Explanation

This solution establishes a centrally managed, shared network environment. The first step is creating a dual-stack VPC with both IPv4 and IPv6 CIDR blocks and correctly sized subnets (A). Next, to allow other teams in the workload account to use this network, the subnets must be shared using AWS Resource Access Manager (RAM) within the AWS Organization (C). Finally, to provide comprehensive dual-stack internet connectivity, an Internet Gateway (for bidirectional traffic), NAT Gateways (for IPv4 outbound), and an Egress-Only Internet Gateway (for IPv6 outbound) are required, along with the necessary route table updates (E). This combination meets all specified requirements for central management, resource sharing, and dual-stack connectivity.

Why Incorrect

B. While using an Amazon-provided IPv6 CIDR is valid, option A describes an equally valid and specific configuration that forms a complete solution when combined with C and E.

D. AWS VPC sharing is accomplished by sharing subnets via AWS RAM, not by sharing the VPC object itself. Accounts need access to subnets to launch resources.

F. This option is outdated and incomplete. It proposes NAT instances instead of managed NAT Gateways and omits the essential Egress-Only Internet Gateway required for IPv6 outbound traffic.

References

1. VPC and Subnet Sizing: AWS Documentation, "VPC and subnet sizing for IPv6". This guide confirms that /56 is the standard IPv6 CIDR block size for a VPC and /64 is the fixed size for subnets.

Source: AWS Documentation > Amazon VPC > User Guide > IP addressing for your VPCs and subnets > VPC and subnet sizing for IPv6.

2. VPC Sharing with AWS RAM: AWS Documentation, "Share your VPC with other accounts". This document explicitly states, "To share your VPC, you share one or more subnets with other AWS accounts... You cannot share a VPC in its entirety." This supports option C and invalidates option D.

Source: AWS Documentation > Amazon VPC > User Guide > Build a VPC > Share your VPC with other accounts.

3. Dual-Stack Internet Connectivity: AWS Documentation, "Networking in your dual-stack VPC". This page details the required components for internet access: an Internet Gateway for public subnets, NAT Gateways for IPv4 outbound from private subnets, and an Egress-Only Internet Gateway for IPv6 outbound from private subnets. This supports option E.

Source: AWS Documentation > Amazon VPC > User Guide > IP addressing for your VPCs and subnets > Dual-stack VPCs > Networking in your dual-stack VPC.

4. NAT Gateways vs. NAT Instances: AWS Documentation, "Compare NAT gateways and NAT instances". This document recommends using NAT gateways over NAT instances for better availability, higher bandwidth, and reduced administrative effort, making option E superior to F.

Source: AWS Documentation > Amazon VPC > User Guide > NAT > Compare NAT gateways and NAT instances.

Premium Access Includes

FLASH OFFER

avail 10% DISCOUNT on YOUR PURCHASE