AWSAWS Certified Advanced Networking - Specialty
The AWS Certified Advanced Networking - Specialty certification validates your expertise in designing, implementing, managing, and securing complex AWS and hybrid network architectures at scale. It is intended for networking specialists with deep knowledge of AWS services, advanced routing, automation, and network security. Earning this credential demonstrates your ability to architect resilient, high-performance networks that meet demanding business requirements.
422 practice questions · Updated 2026-07-30
4Domains
16Objectives
152Concepts
422Questions
ANS-C01 Curriculum
Every domain, objective, and concept the ANS-C01 exam measures.
- Edge Network Services Overview
- Amazon CloudFront for Global Content Delivery
- AWS Global Accelerator for Traffic Management
- Route 53 for DNS-Based Traffic Optimization
- Edge Security Integration
- Hybrid Edge Networking
- Performance Optimization Techniques
- Traffic Management and Failover Strategies
- Public DNS Design
- Private DNS Design
- Hybrid DNS Design
- DNS Resolution and Routing
- DNS Security and Compliance
- DNS Failover and High Availability
- DNS Performance Optimization
- DNS Integration with AWS Services
- Load Balancing Fundamentals
- High Availability Design
- Scalability Strategies
- Security Integration
- AWS Load Balancer Types
- Cross-Zone Load Balancing
- Sticky Sessions
- Health Checks and Monitoring
- Integration with DNS and Route 53
- Hybrid and Multi-Region Architectures
- AWS logging services
- Hybrid network logging
- Network metrics and monitoring
- Log aggregation and analysis
- Alarming and notifications
- Compliance and audit logging
- Troubleshooting with logs
- AWS Site-to-Site VPN
- AWS Direct Connect
- Direct Connect plus VPN backup
- Transit Gateway
- VPN CloudHub
- AWS Client VPN
- Routing and route tables
- BGP routing
- IP addressing and CIDR planning
- Network Address Translation (NAT)
- Security groups and network ACLs
- High availability and failover
- Performance and latency optimization
- Cost optimization
- Monitoring and troubleshooting
- Multi-account network architecture
- Multi-Region connectivity patterns
- VPC peering design
- Transit Gateway architecture
- AWS PrivateLink for service connectivity
- Routing strategy across VPCs and accounts
- Connectivity patterns for hybrid networks
- Centralized egress and ingress
- Network segmentation and isolation
- Scaling and high availability in connectivity
- AWS Site-to-Site VPN
- AWS Direct Connect
- Transit Gateway
- VPC Peering
- Route Tables and Routing Policies
- BGP Routing
- Hybrid DNS Resolution
- Network Address Translation (NAT)
- Security Groups and Network ACLs
- High Availability and Failover
- Monitoring and Troubleshooting Connectivity
- Multi-account connectivity patterns
- Cross-Region VPC peering
- Transit Gateway architecture
- Transit Gateway route tables and propagation
- Transit Gateway peering across Regions
- VPC sharing and Resource Access Manager
- Centralized egress and ingress
- Routing policies and route tables
- Inter-Region VPC peering vs Transit Gateway
- Multi-account network segmentation
- Hybrid DNS Architecture Design
- Multi-Account DNS Management
- Route 53 Resolver Endpoints
- Conditional Forwarding Rules
- Private Hosted Zones and VPC Associations
- DNS Failover and Health Checks
- Split-Horizon DNS
- DNS Logging and Monitoring
- Infrastructure as Code (IaC) for Network
- AWS CloudFormation for Network Resources
- AWS CDK for Network Infrastructure
- AWS CLI and SDKs for Network Automation
- AWS Elastic Beanstalk and OpsWorks for Network
- Configuration Management Tools (Ansible, Chef, Puppet)
- AWS Systems Manager for Network Configuration
- AWS Config for Compliance and Automation
- AWS Lambda for Network Automation
- AWS Step Functions for Network Workflows
- AWS Transit Gateway and VPC Peering Automation
- AWS Direct Connect and VPN Automation
- Network Monitoring and Remediation Automation
- Version Control and CI/CD for Network Changes
- AWS routing fundamentals
- Hybrid connectivity options
- Route propagation and BGP
- Transit Gateway routing
- VPC peering and routing
- Route table management
- Troubleshooting connectivity
- High availability and failover
- Network segmentation and security
- Monitoring and optimization
- Network Traffic Monitoring Fundamentals
- Flow Logs Analysis
- Packet Capture and Analysis
- Metrics and Alarms for Network Monitoring
- Traffic Mirroring
- Connectivity Troubleshooting Techniques
- Optimizing Connectivity Patterns
- Network Performance Optimization
- Network Reliability Optimization
- Network Cost Optimization
- Performance Monitoring and Analysis
- Reliability Testing and Failover
- Cost-Benefit Trade-offs
- Network Security Requirements Analysis
- Security Group and NACL Implementation
- VPC Peering and Transit Gateway Security
- VPN and Direct Connect Security
- Network Encryption
- Logging and Monitoring for Compliance
- Network Access Control and Segmentation
- Compliance Frameworks Alignment
- Incident Response and Remediation
- Security Automation and Infrastructure as Code
- Network Monitoring and Logging Services Overview
- VPC Flow Logs Configuration and Analysis
- CloudWatch Logs for Network Security
- CloudTrail for Network API Auditing
- AWS Config for Network Compliance
- GuardDuty for Threat Detection
- Log Aggregation and Centralization
- Security Auditing with Athena and QuickSight
- Alarming and Notification for Security Events
- Compliance Validation and Reporting
- Encryption in Transit
- Key Management for Network Encryption
- VPN and Direct Connect Encryption
- TLS Termination and Offloading
- Network Access Control for Confidentiality
- Data Loss Prevention (DLP) in Network
- Monitoring and Auditing for Confidentiality
- Compliance and Governance for Data Confidentiality
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for ANS-C01, so none is invented.