Cert Master

ANS-C01 Domain 4: Network Security, Compliance, and Governance

After a design review, leadership requires the team to centralize egress through inspection VPC. Which approach is MOST reliable? centralize egress through inspection VPC.

Multiple choice — select one answer

Answer choices

  1. a. Direct internet egress every VPC
  2. b. TGW route tables to firewall VPC
  3. c. API Gateway private REST APIs with VPC endpoint
  4. d. API Gateway mutual TLS or ALB trust stores

Architectural breakdown & explanation

Centralized egress simplifies policy enforcement.

Correct answer(s): b. TGW route tables to firewall VPC

Exam domain: Domain 4: Network Security, Compliance, and Governance (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Advanced Networking – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications