AWS Certified Advanced Networking – Specialty Practise Exam

Who it is for

• Candidates preparing for the AWS Certified Advanced Networking – Specialty Certification (ANS-C01).
• Practitioners who design, implement, and operate AWS and hybrid networks and need practice with routing, DNS, load balancing, automation, and network security controls.

What this exam covers

• Network Design — 30%
• Network Implementation — 26%
• Network Management and Operation — 20%
• Network Security, Compliance, and Governance — 24%

What you will practice

• Design edge and DNS architectures with Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53, and plan hybrid and multi-VPC routing with AWS Direct Connect, AWS Transit Gateway, and AWS PrivateLink.
• Implement hybrid connectivity with AWS Direct Connect and AWS Site-to-Site VPN, share AWS Transit Gateway and Amazon VPC with AWS RAM and AWS Organizations, and automate networks with AWS CloudFormation and AWS CDK.
• Maintain BGP and AWS Transit Gateway routing, troubleshoot with VPC Flow Logs, VPC Traffic Mirroring, and VPC Reachability Analyzer, and optimize throughput with AWS Global Accelerator and Amazon CloudFront.
• Secure inbound and outbound traffic with AWS WAF, AWS Shield, and AWS Network Firewall, audit with VPC Flow Logs and AWS Firewall Manager, and encrypt traffic with IPsec, TLS, ACM, and AWS Private Certificate Authority.

About this practice exam

The AWS Certified Advanced Networking – Specialty exam tests a candidate’s ability to design, implement, manage, and secure AWS and hybrid network architectures at scale: design and develop hybrid and cloud-based networking solutions by using AWS; implement core AWS networking services according to AWS best practices; operate and maintain hybrid and cloud-based network architecture for all AWS services; use tools to deploy and automate hybrid and cloud-based AWS networking tasks; and implement secure AWS networks using AWS native networking constructs and services. This practice exam prepares you for AWS Certified Advanced Networking – Specialty (ANS-C01) across Network Design, Network Implementation, Network Management and Operation, and Network Security, Compliance, and Governance.

The exam emphasizes edge delivery and global traffic management with Amazon CloudFront, AWS Global Accelerator, Elastic Load Balancing (ELB), and Amazon API Gateway; public, private, and hybrid DNS with Amazon Route 53 hosted zones, Amazon Route 53 Resolver, traffic policies, health checks, and DNSSEC; hybrid connectivity with AWS Direct Connect, AWS Site-to-Site VPN, Border Gateway Protocol (BGP), AWS Transit Gateway Connect, and software-defined wide area network (SD-WAN) overlays; multi-account and multi-Region routing with Amazon Virtual Private Cloud (Amazon VPC), VPC peering, AWS Transit Gateway, AWS PrivateLink, AWS Resource Access Manager (AWS RAM), and AWS Organizations; load balancing at layer 3, layer 4, and layer 7, including AWS Load Balancer Controller for Amazon Elastic Kubernetes Service (Amazon EKS); visibility with Amazon CloudWatch, VPC Flow Logs, VPC Traffic Mirroring, VPC Reachability Analyzer, and AWS Transit Gateway Network Manager; network security with AWS WAF, AWS Shield, AWS Network Firewall, security groups, network access control lists (network ACLs), and AWS Firewall Manager; encryption and certificates with IPsec, TLS, AWS Certificate Manager (ACM), and AWS Private Certificate Authority (ACM PCA); and network automation with AWS CloudFormation, AWS Cloud Development Kit (AWS CDK), the AWS CLI, and AWS SDKs. It does not primarily assess analytics services such as Amazon EMR, AWS Glue, Amazon Redshift, or Amazon OpenSearch Service; developer tools such as AWS X-Ray; or blockchain, robotics, or satellite services.

The official AWS Certified Advanced Networking – Specialty (ANS-C01) exam is 65 questions in 170 minutes. This practice exam follows the four official Advanced Networking – Specialty domains and their published weights.

The certification validates understanding of:

• Network Design: edge and global traffic with Amazon CloudFront, AWS Global Accelerator, Elastic Load Balancing (ELB), and Amazon API Gateway; DNS with Amazon Route 53 public hosted zones, private hosted zones, Resolver endpoints, alias records, traffic policies, health checks, and DNSSEC; hybrid routing with AWS Direct Connect, AWS Site-to-Site VPN, BGP, and AWS Transit Gateway Connect; multi-account connectivity with Amazon VPC, VPC peering, AWS Transit Gateway, AWS PrivateLink, VPC sharing, and AWS RAM; load balancing at layer 3, layer 4, and layer 7, including AWS Load Balancer Controller for Amazon EKS; and logging with Amazon CloudWatch, VPC Flow Logs, VPC Traffic Mirroring, VPC Reachability Analyzer, AWS Transit Gateway Network Manager, and access logs for load balancers and Amazon CloudFront.
• Network Implementation: hybrid routing and connectivity with AWS Direct Connect, AWS Site-to-Site VPN, BGP, AWS Transit Gateway Connect, and SD-WAN overlays; multi-account and multi-Region patterns with Amazon VPC, VPC peering, AWS Transit Gateway, AWS PrivateLink, AWS Organizations, and AWS RAM; hybrid and multi-account DNS with Amazon Route 53 hosted zones, conditional forwarding, Resolver endpoints, and DNSSEC; load balancing and network monitoring; connectivity tests with VPC Reachability Analyzer and Transit Gateway Route Analyzer; and automation with AWS CloudFormation, AWS CDK, the AWS CLI, and AWS SDKs.
• Network Management and Operation: BGP, AWS Direct Connect gateways, virtual interfaces (VIFs), and AWS Transit Gateway routing, including quotas and CIDR overlap; private access with AWS PrivateLink and VPC peering; troubleshooting with Amazon CloudWatch, VPC Flow Logs, VPC Traffic Mirroring, VPC Reachability Analyzer, and AWS Transit Gateway Network Manager; and optimization with Amazon CloudFront, AWS Global Accelerator, Amazon Route 53 health checks, multicast, jumbo frames, elastic network interfaces, Elastic Network Adapter (ENA), and Elastic Fabric Adapter (EFA).
• Network Security, Compliance, and Governance: inbound and outbound controls with AWS WAF, AWS Shield, AWS Network Firewall, Gateway Load Balancers, proxies, security groups, network ACLs, and VPC endpoint policies; audit and alerting with Amazon CloudWatch, AWS CloudTrail, VPC Flow Logs, VPC Traffic Mirroring, AWS Transit Gateway Network Manager, and AWS Firewall Manager; and confidentiality with IPsec, TLS, VPN over AWS Direct Connect, DNSSEC, ACM, and AWS Private Certificate Authority (ACM PCA).