Cert Master

ANS-C01 Domain 4: Network Security, Compliance, and Governance

While troubleshooting latency, engineers determine they must segment privileged admin access. Which action is appropriate? segment privileged admin access.

Multiple choice — select one answer

Answer choices

  1. a. SSM Session Manager instead of bastion SSH
  2. b. API Gateway mutual TLS or ALB trust stores
  3. c. API Gateway private REST APIs with VPC endpoint
  4. d. AWS Network Firewall

Architectural breakdown & explanation

Session Manager audits shell access without open ports.

Correct answer(s): a. SSM Session Manager instead of bastion SSH

Exam domain: Domain 4: Network Security, Compliance, and Governance (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Advanced Networking – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications