AWS Advanced Networking Specialty ANS-C01 — Study Guide
Practice as you learn. Every concept maps to real exam questions with verified answers in the Amazon exam hub, or drill the full exam with timed practice on ExamRoll.io.
This guide covers each ANS-C01 domain in depth. Pick a domain to go deep, or work through them in order.
The domains
- VPC Design and Advanced Networking — Route tables and subnet placement are how you enforce topology and resilience. Create distinct route tables per subnet purpose (public, private with
- Hybrid Connectivity: VPN and Direct Connect — Hybrid connectivity in AWS is the combination of privately provisioned network circuits and encrypted IP tunnels to extend on‑premises networks into
- Transit Gateway and Network Topology — AWS Transit Gateway (TGW) is a regional network transit hub that centralizes routing between Amazon VPCs, VPNs, Direct Connect gateways, and other
- DNS and Route 53 — Route 53 also integrates routing decision logic and active health checks into DNS. Routing policies include Simple, Weighted, Latency, Failover
- Load Balancing and Traffic Management — Listeners and listener rules are the L4/L7 entrypoints that map protocols/ports to target groups. A listener on an ALB can have complex rules that
- Network Security and Compliance — Network security in AWS is layered: perimeter controls, VPC-level controls, host- and application-level controls, and monitoring/inspection. At the
- Content Delivery and Edge Networking — Global Accelerator and Anycast operate below the HTTP layer. Global Accelerator announces two static anycast IP addresses from the AWS edge network
- Network Performance and Monitoring — Placement groups affect performance by controlling instance placement within the underlying networking fabric. A cluster placement group biases
- Automation, IaC and Network Operations — Infrastructure as Code for networking on AWS turns network topology, security policy and routing into declarative templates and deterministic
- Container and Serverless Networking — Alternatives to the Amazon VPC CNI such as Cilium (eBPF) or Calico can provide different tradeoffs. Cilium can replace kube-proxy and implement
Ready to practice?
- Browse every question with verified answers → — free, with explanations.
- Start timed practice tests on ExamRoll.io → — the full question bank, in 20+ languages.
Pass the whole exam — not just this question
You found this answer. Get every verified question and explanation in one place, and save hours of prep. Free to start.
Pass your exam →