☁️ AWS

AWS Certified Advanced Networking - Specialty (ANS-C01)

Free study resources for AWS Certified Advanced Networking - Specialty (ANS-C01) — practice questions, mock exams, AI-generated study notes, and flashcards.

1,156

Practice Questions

Mock Exams

231

Study Notes

965

Flashcard Decks

Source Materials

Start Studying — Free0 learners studying this hive

Study Notes & Guides

231 AI-generated study notes covering the full AWS Certified Advanced Networking - Specialty (ANS-C01) curriculum.

AWS Networking: Mastering Access Logging for ELB and CloudFront

Access logging (for example, load balancers, CloudFront)

925 words

Mastering AWS Alert Mechanisms: CloudWatch Alarms and Incident Response

Alert mechanisms (for example, CloudWatch alarms)

1,050 words

Mastering Amazon CloudWatch: Observability and Monitoring for AWS Architectures

Amazon CloudWatch metrics, agents, logs, alarms, dashboards, and insights in AWS architectures to provide visibility

875 words

Mastering Amazon Route 53: Advanced Features & Hybrid DNS

Amazon Route 53 features (for example, alias records, traffic policies, resolvers, health checks)

1,345 words

Study Guide: Packet Analysis and VPC Traffic Mirroring

Analyzing packets to identify issues in packet shaping (for example, VPC Traffic Mirroring)

1,050 words

AWS Network Performance Analysis & Troubleshooting Study Guide

Analyzing tool output to assess network performance and troubleshoot connectivity (for example, VPC Flow Logs, Amazon CloudWatch Logs)

945 words

AWS Network Performance and Reachability Assessment Guide

Appropriate logs and metrics to assess network performance and reachability issues (for example, packet loss)

1,085 words

AWS Networking: Authentication & Authorization Study Guide

Authentication and authorization (for example, SAML, Active Directory)

945 words

ANS-C01 Exam Cram: Automating and Configuring Network Infrastructure

Automate and configure network infrastructure

860 words

Lab: Automating Secure Network Infrastructure with CloudFormation and EventBridge

Automate and configure network infrastructure

840 words

Study Guide: Automating and Configuring Network Infrastructure

Automate and configure network infrastructure

985 words

Automating Security Incident Reporting and Alerting on AWS

Automating security incident reporting and alerting using AWS

920 words

Optimizing Cloud Network Resources with Infrastructure as Code (IaC)

Automating the process of optimizing cloud network resources with IaC

945 words

Study Guide: Automating Connectivity Verification with Reachability Analyzer

Automating the verification of connectivity intent as a network configuration changes (for example, Reachability Analyzer)

925 words

Route 53: Architecting for High Availability and Reliability

Availability of options from Route 53 that provide reliability

1,140 words

Comprehensive Study Guide: Inter-Regional and Intra-Regional AWS Communication Patterns

Available inter-Regional and intra-Regional communication patterns

895 words

Mastering Private and Public Access for Custom AWS Services

Available private and public access methods for custom services (for example, PrivateLink, VPC peering)

1,150 words

AWS Load Balancer Controller for Kubernetes clusters

920 words

AWS Network Architecture: Security and Compliance Master Study Guide

AWS network architecture that meets security and compliance requirements

850 words

AWS Multi-Account Networking: Organizations & Resource Access Manager (RAM)

AWS Organizations and AWS Resource Access Manager (AWS RAM) (for example, multi-account Transit Gateway, Direct Connect, Amazon VPC, Route 53)

895 words

Visibility and Management with AWS Transit Gateway Network Manager

AWS Transit Gateway Network Manager in architectures to provide visibility

820 words

AWS Advanced Networking: Mastering VPC Sharing

Capabilities and advantages of VPC sharing

925 words

Capturing Baseline Network Performance

Capturing baseline network performance

920 words

AWS Network Connectivity Selection: VPC Peering, Transit Gateway, and Proxy Patterns

Choosing between VPC peering, proxy patterns, or a transit gateway connection based on analysis of the network requirements provided

1,084 words

Pitfalls of Hard-Coding in IaC for Cloud Networking

Common problems of using hardcoded instructions in IaC templates when provisioning cloud networking resources

942 words

Comprehensive Study Guide: Common Security Threats in AWS Networking

Common security threats

985 words

AWS ELB Advanced Configuration Options: A Specialty Study Guide

Configuration options for load balancers (for example, proxy protocol, cross-zone load balancing, session affinity [sticky sessions], routing algorithms)

860 words

AWS Load Balancer Target Group Configurations

Configuration options for load balancer target groups (for example, TCP, GENEVE, IP compared with instance)

985 words

Mastering Hybrid DNS: Route 53 Resolver Architecture

Configuring a DNS solution to make hybrid connectivity possible

925 words

Mastering AWS Hub-and-Spoke Networking: Transit Gateway and Transit VPC

Configuring a hub-and-spoke network architecture (for example, Transit Gateway, transit VPC)

1,050 words

Mastering AWS Load Balancing: Implementation & Configuration Strategy

Configuring and implementing load balancing solutions

1,184 words

Mastering AWS Route 53: Configuring DNS Records for Global & Hybrid Architectures

Configuring appropriate DNS records

1,152 words

AWS Certified Advanced Networking: Configuring DNS for Hybrid Networks

Configuring DNS for hybrid networks

1,085 words

Configuring DNS Monitoring and Logging on Route 53

Configuring DNS monitoring and logging on Route 53

945 words

Deep Dive: Configuring DNSSEC on Amazon Route 53

Configuring DNSSEC on Route 53

885 words

Advanced DNS Architecture: Centralized and Distributed Patterns

Configuring DNS within a centralized or distributed network architecture

1,150 words

Mastering Hybrid DNS: Zones, Endpoints, and Conditional Forwarding

Configuring DNS zones and conditional forwarding

942 words

Study Guide: Hybrid DNS and Route 53 Resolver Architecture

Configuring existing on-premises name resolution with the AWS Cloud

1,085 words

Mastering Hybrid Connectivity: Connecting On-Premises to AWS

Configuring existing on-premises networks to connect with the AWS Cloud

1,245 words

Configuring Hybrid Connectivity with Third-Party Vendor Solutions

Configuring hybrid connectivity with existing third-party vendor solutions

1,142 words

AWS Networking: Configuring Jumbo Frame Support Across Connection Types

Configuring jumbo frame support across connection types

945 words

AWS Network Connectivity Architectures: Single and Multi-VPC Design

Configuring network connectivity architectures by using AWS services in a single-VPC or multi-VPC design (for example, DHCP, routing, security groups)

1,184 words

AWS Network Monitoring and Logging: Comprehensive Study Guide

Configuring network monitoring and logging by using AWS solutions

1,150 words

AWS Network Monitoring and Logging: Configuration and Audit Strategy

Configuring network monitoring and logging for AWS services

1,150 words

Configuring Routing for AWS Hybrid Connectivity: Static and Dynamic Strategies

Configuring static or dynamic routing protocols to work with hybrid connectivity solutions

1,124 words

Configuring Physical Network Requirements for AWS Hybrid Connectivity

Configuring the physical network requirements for hybrid connectivity solutions

945 words

Configuring Advanced Traffic Management with Amazon Route 53

Configuring traffic management by using DNS solutions

1,342 words

AWS Advanced Networking: Inter-VPC Connectivity & Architecture

Connecting multiple VPCs by using the most appropriate services based on requirements (for example, using VPC peering, Transit Gateway, PrivateLink)

1,084 words

Mastering AWS Hybrid Connectivity: Direct Connect, Transit Gateway, and VIFs

Connectivity methods for AWS and hybrid networks (for example, Direct Connect gateway, Transit Gateway, VIFs)

890 words

AWS Connectivity Patterns: Internal vs. External Load Balancing

Connectivity patterns that apply to load balancing based on the use case (for example, internal load balancers, external load balancers)

925 words

Showing 50 of 231 study notes. View all →

Sample Practice Questions

Try 5 sample questions from a bank of 1,156.

Q1.A network architect is designing a high-performance hybrid cloud connectivity solution using AWS Transit Gateway Connect to integrate a virtual SD-WAN appliance hosted in a VPC. The solution must support high-bandwidth throughput using GRE tunnels. Which configuration step is mandatory when setting up the Transit Gateway Connect peer to establish BGP connectivity with the SD-WAN appliance?

A.Configure the BGP session to use the public IP address of the SD-WAN appliance as the peer address over an underlying IPsec VPN transport.

B.Specify a $/29$ CIDR block for the BGP inside addresses to provide the IP addresses for the BGP peering session within the GRE tunnel.

C.Establish a VPC peering connection between the SD-WAN appliance's VPC and the Transit Gateway's management VPC before creating the Connect attachment.

D.Enable Jumbo Frames ($9,001$ bytes) on the GRE tunnel interface of the SD-WAN appliance to match the required MTU for Transit Gateway Connect peers.

Show answer

Correct: B

Q2.An enterprise has a multi-account AWS environment with several VPCs distributed across the `us-east-1` and `us-west-2` Regions. The organization requires a scalable routing architecture that enables full transitive communication between all VPCs regardless of the account or Region, while minimizing the administrative overhead associated with managing connection pairs. Which architecture should the network engineer implement to meet these requirements?

A.Establish a full mesh of VPC Peering connections between all VPCs across all accounts and Regions, ensuring route tables are updated manually.

B.Deploy an AWS Transit Gateway in each Region, share the gateways with other accounts via AWS Resource Access Manager (RAM), and establish an inter-Region peering connection between them.

C.Deploy a single AWS Transit Gateway in the `us-east-1` Region and attach all VPCs from both `us-east-1` and `us-west-2` to it using standard VPC attachments.

D.Implement AWS PrivateLink in a centralized 'Shared Services' VPC and create interface endpoints in every other VPC to facilitate general-purpose routing.

Show answer

Correct: B

Q3.An organization has established a Site-to-Site VPN between their on-premises data center and an Amazon VPC. An application on an on-premises server (MTU $1,500$) is attempting to transfer large files to an EC2 instance (MTU $1,500$) using TCP. While small packets like ICMP pings and SSH handshakes succeed, the file transfer hangs indefinitely after the initial connection. Troubleshooting reveals that the VPN's maximum MTU is $1,436$ bytes. Which of the following is the most likely cause and the most effective resolution?

A.The Security Group on the EC2 instance is blocking inbound ICMP Type $8$ (Echo Request) traffic. Resolution: Update the Security Group to allow all ICMP traffic from the on-premises CIDR.

B.Path MTU Discovery (PMTUD) is failing because ICMP Type $3$ Code $4$ (Fragmentation Needed) messages are being dropped by a network firewall. Resolution: Allow ICMP Type $3$ Code $4$ or implement TCP MSS clamping on the network path.

C.The EC2 instance is utilizing Jumbo Frames (MTU $9,000$), which are not supported over a Virtual Private Gateway (VGW). Resolution: Enable Jumbo Frame support on the VPN connection settings in the AWS Management Console.

D.The VPC Route Table is missing a specific route for the on-premises subnet, causing asymmetric routing for large packets. Resolution: Add a static route to the Route Table pointing to the Virtual Private Gateway.

Show answer

Correct: B

Q4.A company is connecting an AWS VPC to an on-premises data center using a Direct Connect connection. They require a DNS solution that allows EC2 instances in the VPC to resolve hostnames in the on-premises domain $corp.internal$, and on-premises clients to resolve hostnames in a Route 53 Private Hosted Zone (PHZ) associated with the VPC. Which configuration correctly identifies the Route 53 Resolver components needed to meet these requirements?

A.An **Inbound Endpoint** to forward VPC queries to on-premises and an **Outbound Endpoint** to receive on-premises queries for the PHZ.

B.An **Outbound Endpoint** with forwarding rules for $corp.internal$ and an **Inbound Endpoint** with IP addresses assigned from the VPC to receive on-premises queries.

C.A **Route 53 Private Hosted Zone** for $corp.internal$ and a **Public Hosted Zone** for the VPC resources, both managed by an **Inbound Endpoint**.

D.A **Transit Gateway** with DNS support enabled and a custom **DHCP Options Set** pointing to on-premises DNS server IP addresses.

Show answer

Correct: B

Q5.A network engineer is configuring a Route 53 Private Hosted Zone (PHZ) named `service.internal` in AWS Account A, which is currently associated with `VPC-A`. The engineer needs to allow resources in `VPC-B`, located in AWS Account B, to resolve records within this PHZ. The two VPCs are already connected via a Transit Gateway. Which of the following describes the correct process to enable DNS resolution for `VPC-B`?

A.In Account A, run the `create-vpc-association-authorization` command for `VPC-B`. Then, in Account B, run the `associate-vpc-with-hosted-zone` command.

B.Use AWS Resource Access Manager (RAM) to share the PHZ from Account A with Account B, then associate `VPC-B` with the shared resource in the Route 53 console.

C.Create a Route 53 Resolver Inbound Endpoint in Account A and an Outbound Endpoint in Account B, then create a forwarding rule for `service.internal` pointing to Account A.

D.In Account A, update the PHZ's Access Control List (ACL) to permit the CIDR range of `VPC-B`, and ensure `enableDnsSupport` is set to `true` in both VPCs.

Show answer

Correct: A

Want more? Clone this hive to access all 1,156 questions, timed exams, and AI tutoring. Start studying →

Flashcard Collections

965 flashcard decks for spaced-repetition study.

5 cards

Edge Network Services for Global Architectures

Sample:

**Amazon CloudFront**

5 cards

CloudFront & CDN Design Patterns

Sample:

**Edge Location**

5 cards

AWS Global Accelerator & Global Traffic Management

Sample:

**AWS Global Accelerator**

5 cards

Global Traffic and Content Distribution Design

Sample:

**Amazon CloudFront**

5 cards

Integration of CDN and Global Traffic Management with AWS Services

Sample:

Describe the traffic flow for a user accessing an application via **AWS Global Accelerator** integrated with regional **Network Load Balancers (NLB)**.

5 cards

AWS DNS Solutions: Public, Private, and Hybrid Requirements

Sample:

**Route 53 Resolver Inbound Endpoint**

Ready to ace AWS Certified Advanced Networking - Specialty (ANS-C01)?

Clone this hive to get full access to all 1,156 practice questions, 12 timed mock exams, study notes, flashcards, and a personal AI tutor — completely free.

Start Studying — Free