CertifyCloudxAce every cloud certification.
AWSSpecialtyRetiring · 31 December 2026

AWS Certified Advanced Networking – Specialty

ANS-C01

Design and implement AWS and hybrid network architectures at scale. Retires 31 December 2026.

This exam retires on 31 December 2026 — practice is no longer offered

CertifyCloudx no longer offers practice questions or mock exams for this exam. The exam details and the official syllabus below are kept for reference until it retires.

Withdrawn — CertifyCloudx does not prepare candidates for this exam any more. What follows is the official exam guide, kept for reference.

What's on the exam

4 domains · 16 task statements, straight from the official exam guide (as of 2026-09-29).

  1. 1.1Design a solution that incorporates edge network services to optimize user performance and traffic management for global architectures
    • Design patterns for the usage of content distribution networks (for example, Amazon CloudFront)
    • Design patterns for global traffic management (for example, AWS Global Accelerator)
    • Integration patterns for content distribution networks and global traffic management with other services (for example, Elastic Load Balancing [ELB], Amazon API Gateway)
    • Evaluating requirements of global inbound and outbound traffic from the internet to design an appropriate content distribution solution
  2. 1.2Design DNS solutions that meet public, private, and hybrid requirements
    • DNS protocol (for example, DNS records, TTL, DNSSEC, DNS delegation, zones)
    • DNS logging and monitoring
    • Amazon Route 53 features (for example, alias records, traffic policies, resolvers, health checks)
    • Integration of Route 53 with other AWS networking services (for example, Amazon VPC)
    • Integration of Route 53 with hybrid, multi-account, and multi-Region options
    • Domain registration
    • Using Route 53 public hosted zones
    • Using Route 53 private hosted zones
    • Using Route 53 Resolver endpoints in hybrid and AWS architectures
    • Using Route 53 for global traffic management
    • Creating and managing domain registrations
  3. 1.3Design solutions that integrate load balancing to meet high availability, scalability, and security requirements
    • How load balancing works at layer 3, layer 4, and layer 7 of the OSI model
    • Different types of load balancers and how they meet requirements for network design, high availability, and security
    • Connectivity patterns that apply to load balancing based on the use case (for example, internal load balancers, external load balancers)
    • Scaling factors for load balancers
    • Integrations of load balancers and other AWS services (for example, Global Accelerator, CloudFront, AWS WAF, Route 53, Amazon Elastic Kubernetes Service [Amazon EKS], AWS Certificate Manager [ACM])
    • Configuration options for load balancers (for example, proxy protocol, cross-zone load balancing, session affinity [sticky sessions], routing algorithms)
    • Configuration options for load balancer target groups (for example, TCP, GENEVE, IP compared with instance)
    • AWS Load Balancer Controller for Kubernetes clusters
    • Considerations for encryption and authentication with load balancers (for example, TLS termination, TLS passthrough)
    • Selecting an appropriate load balancer based on the use case
    • Integrating auto scaling with load balancing solutions
    • Integrating load balancers with existing application deployments
  4. 1.4Define logging and monitoring requirements across AWS and hybrid networks
    • Amazon CloudWatch metrics, agents, logs, alarms, dashboards, and insights in AWS architectures to provide visibility
    • AWS Transit Gateway Network Manager in architectures to provide visibility
    • VPC Reachability Analyzer in architectures to provide visibility
    • Flow logs and traffic mirroring in architectures to provide visibility
    • Access logging (for example, load balancers, CloudFront)
    • Identifying the logging and monitoring requirements
    • Recommending appropriate metrics to provide visibility of the network status
    • Capturing baseline network performance
  5. 1.5Design a routing strategy and connectivity architecture between on-premises networks and the AWS Cloud
    • Routing fundamentals (for example, dynamic compared with static, BGP)
    • Layer 1 and layer 2 concepts for physical interconnects (for example, VLAN, link aggregation group [LAG], optics, jumbo frames)
    • Encapsulation and encryption technologies (for example, Generic Routing Encapsulation [GRE], IPsec)
    • Resource sharing across AWS accounts
    • Overlay networks
    • Identifying the requirements for hybrid connectivity
    • Designing a redundant hybrid connectivity model with AWS services (for example, AWS Direct Connect, AWS Site-to-Site VPN)
    • Designing BGP routing with BGP attributes to influence the traffic flows based on the desired traffic patterns (load sharing, active/passive)
    • Designing for integration of a software-defined wide area network (SD-WAN) with AWS (for example, Transit Gateway Connect, overlay networks)
  6. 1.6Design a routing strategy and connectivity architecture that include multiple AWS accounts, AWS Regions, and VPCs to support different connectivity patterns
    • Different connectivity patterns and use cases (for example, VPC peering, Transit Gateway, AWS PrivateLink)
    • Capabilities and advantages of VPC sharing
    • IP subnets and solutions accounting for IP address overlaps
    • Connecting multiple VPCs by using the most appropriate services based on requirements (for example, using VPC peering, Transit Gateway, PrivateLink)
    • Using VPC sharing in a multi-account setup
    • Managing IP overlaps by using different available services and options (for example, NAT, PrivateLink, Transit Gateway routing)

Outline reproduced from the vendor's public exam guide for study reference.Official guide