{"id":3322,"date":"2025-06-05T12:31:44","date_gmt":"2025-06-05T07:01:44","guid":{"rendered":"https:\/\/www.skilr.com\/blog\/?p=3322"},"modified":"2025-06-05T12:31:45","modified_gmt":"2025-06-05T07:01:45","slug":"how-to-prepare-for-the-aws-advanced-networking-specialty","status":"publish","type":"post","link":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/","title":{"rendered":"How to prepare for the AWS Advanced Networking \u2013 Specialty ?"},"content":{"rendered":"\n<p>When cloud environments grow, so do the networking challenges. From managing multi-VPC architectures to securing hybrid connections and optimizing traffic flow across global regions, networking on AWS is no longer a side task, it&#8217;s mission-critical. The <a href=\"https:\/\/www.skilr.com\/aws-certified-advanced-networking-specialty-exam\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Advanced Networking \u2013 Specialty<\/a> certification is built for professionals who face these complexities daily and need a structured way to prove, improve, and apply their skills.<\/p>\n\n\n\n<p>If you are spending too much time troubleshooting inter-region latency, manually configuring route tables, or trying to scale secure communication across multiple accounts, this certification is not just a credential, it\u2019s a solution-focused framework. It equips you with the knowledge to design efficient, scalable, and secure networks while also validating your ability to troubleshoot and automate real-world use cases.<\/p>\n\n\n\n<p>In this guide, we will show you how to approach preparation smartly \u2014 from pinpointing high-value services like Transit Gateway and AWS Direct Connect, to using hands-on labs, whitepapers, and proven learning paths that align with real scenarios. Let\u2019s break down exactly what to learn, how to structure your study time, and where to practice for results.<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center has-white-color has-vivid-cyan-blue-background-color has-text-color has-background has-link-color wp-elements-f20be7654f466d92141667c0c3c91a71\"><strong>About AWS Certified Advanced Networking &#8211; Specialty Exam<\/strong><\/h2>\n\n\n\n<p>As businesses scale their cloud environments, the need for robust, secure, and high-performing networking solutions is growing rapidly. From hybrid architectures to complex routing, networking has become a cornerstone of modern cloud infrastructure. This is where the AWS Certified Advanced Networking \u2013 Specialty certification comes in.<\/p>\n\n\n\n<p>This exam is designed for experienced networking professionals who want to validate their ability to design and implement advanced AWS and hybrid network architectures at scale. Unlike foundational or associate-level exams, this one dives deep into topics like VPC design, network automation, hybrid connectivity, DNS, and security best practices.<\/p>\n\n\n\n<p>Whether you are a network engineer, cloud architect, or DevOps professional working in enterprise settings, this certification can significantly boost your credibility, salary, and career growth in 2025. However, it is also one of the most challenging exams in the AWS certification track, so having a clear study plan is critical. Let us begin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Why choose the <strong>AWS Certified Advanced Networking &#8211; Specialty Exam<\/strong>?<\/strong><\/h3>\n\n\n\n<p>In today\u2019s cloud-first world, networking is no longer just about routers and switches. It is about designing secure, scalable, and cost-efficient infrastructure that supports global applications, hybrid environments, and multi-account setups. The <a href=\"https:\/\/aws.amazon.com\/certification\/certified-advanced-networking-specialty\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Certified Advanced Networking \u2013 Specialty exam <\/a>validates your ability to work in precisely these complex settings.<\/p>\n\n\n\n<p>One of the biggest advantages of earning this certification is the career flexibility it brings. Whether you are aiming for roles such as Cloud Network Engineer, AWS Solutions Architect, or Network Security Consultant, this credential proves that you understand how to build and manage advanced networking solutions on AWS.<\/p>\n\n\n\n<p>Another key motivator is salary growth. Certified networking professionals typically command higher compensation. In fact, according to recent surveys, AWS Specialty certifications consistently rank among the highest-paying cloud credentials worldwide.<\/p>\n\n\n\n<p>Additionally, in 2025, more organizations are adopting hybrid and multi-cloud strategies. This creates a strong demand for professionals who can seamlessly connect on-premises systems with AWS, set up Transit Gateways, use PrivateLink for secure service access, and automate networking tasks. This exam is your opportunity to prove those skills.<\/p>\n\n\n\n<p>Lastly, this certification helps distinguish you in a crowded field. It shows not only technical knowledge but also your ability to manage real-world networking challenges using AWS tools and best practices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Who should take the Exam?<\/strong><\/h3>\n\n\n\n<p>The AWS Certified Advanced Networking \u2013 Specialty exam is not for beginners. It is specifically designed for professionals who already have hands-on experience in designing and implementing networks, both on-premises and in the cloud. If you are someone who works with complex networking architectures, this certification is a natural next step in your career.<\/p>\n\n\n\n<p>You should consider this exam if you meet most of the following criteria:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You have at least 5 years of experience in traditional networking (including routing, switching, DNS, firewalls, etc.)<\/li>\n\n\n\n<li>You have 2 or more years of experience working with AWS services, especially VPC, Direct Connect, VPN, Load Balancing, and Route 53<\/li>\n\n\n\n<li>You are comfortable with hybrid environments and multi-account AWS setups<\/li>\n\n\n\n<li>You understand network security, compliance, and automation tools like CloudFormation or the AWS CLI<\/li>\n<\/ul>\n\n\n\n<p>While there are no formal prerequisites, it is highly recommended that you first earn the AWS Certified Solutions Architect \u2013 Associate or AWS Certified SysOps Administrator \u2013 Associate certification. These will provide the foundational AWS knowledge needed for this advanced exam.<\/p>\n\n\n\n<p>This certification is ideal for roles such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Network Engineers<\/li>\n\n\n\n<li>Cloud Architects<\/li>\n\n\n\n<li>DevOps Engineers with a networking focus<\/li>\n\n\n\n<li>Network Security Professionals<\/li>\n\n\n\n<li>IT Infrastructure Architects working in hybrid cloud setups<\/li>\n<\/ul>\n\n\n\n<p>If you are already in one of these roles\u2014or aspiring to move into one\u2014this certification can validate your skills and open up opportunities in enterprise and consulting environments alike.<\/p>\n\n\n\n<p>Here is an exam overview &#8211; <\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Feature<\/strong><\/th><th><strong>Details<\/strong><\/th><\/tr><\/thead><tbody><tr><td><strong>Exam Code<\/strong><\/td><td>ANS-C01<\/td><\/tr><tr><td><strong>Certification Level<\/strong><\/td><td>Specialty<\/td><\/tr><tr><td><strong>Target Audience<\/strong><\/td><td>Experienced networking or cloud professionals<\/td><\/tr><tr><td><strong>Question Format<\/strong><\/td><td>Multiple-choice and multiple-response questions<\/td><\/tr><tr><td><strong>Exam Duration<\/strong><\/td><td>170 minutes<\/td><\/tr><tr><td><strong>Passing Score<\/strong><\/td><td>AWS does not publish the exact passing score<\/td><\/tr><tr><td><strong>Exam Fee<\/strong><\/td><td>$300 USD (plus applicable taxes)<\/td><\/tr><tr><td><strong>Delivery Method<\/strong><\/td><td>Pearson VUE or PSI (online proctored or in-person)<\/td><\/tr><tr><td><strong>Language Availability<\/strong><\/td><td>English, Japanese, Korean, Simplified Chinese<\/td><\/tr><tr><td><strong>Recommended Experience<\/strong><\/td><td>5+ years of networking + 2+ years of hands-on AWS networking experience<\/td><\/tr><tr><td><strong>Prerequisites<\/strong><\/td><td>None officially, but Solutions Architect Associate is strongly recommended<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Key Domains Covered in the Exam<\/strong><\/h3>\n\n\n\n<p>The AWS Certified Advanced Networking \u2013 Specialty exam evaluates your ability to design, implement, and manage networking solutions that are scalable, highly available, and secure. The exam content is divided into six major domains. Understanding the focus of each domain is essential for planning your study strategy.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Domain 1: Network Design (30%)<\/strong><\/h5>\n\n\n\n<p><strong>Task Statement 1.1: Design a solution that incorporates edge network services to optimize user performance and traffic management for global architectures.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Design patterns for the usage of content distribution networks (for example, Amazon CloudFront)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/mediapackage\/latest\/ug\/cdns.html\" target=\"_blank\" rel=\"noreferrer noopener\">Working with Content Delivery Networks (CDNs)<\/a>)<\/li>\n\n\n\n<li>Design patterns for global traffic management (for example, AWS Global Accelerator)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/global-accelerator\/latest\/dg\/getting-started.html\" target=\"_blank\" rel=\"noreferrer noopener\">Getting started with AWS Global Accelerator<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/traffic-management-with-aws-global-accelerator\/\" target=\"_blank\" rel=\"noreferrer noopener\">Traffic management with AWS Global Accelerator<\/a>)<\/li>\n\n\n\n<li>Integration patterns for content distribution networks and global traffic management with other services (for example, Elastic Load Balancing, Amazon API Gateway)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-overview\/networking-services.html\" target=\"_blank\" rel=\"noreferrer noopener\">Networking and Content Delivery<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/introduction-to-network-transformation-on-aws-part-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">Introduction to Network Transformation on AWS<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Evaluating requirements of global inbound and outbound traffic from the internet to design an appropriate content distribution solution\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/security-reference-architecture\/network.html\" target=\"_blank\" rel=\"noreferrer noopener\">Infrastructure OU \u2013 Network account<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/routing-to-cloudfront-distribution.html\" target=\"_blank\" rel=\"noreferrer noopener\">Routing traffic to an Amazon CloudFront distribution<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 1.2: Design DNS solutions that meet public, private, and hybrid requirements.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>DNS protocol (for example, DNS records, timers, DNSSEC, DNS delegation, zones)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/domain-configure-dnssec.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configuring DNSSEC for a domain<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/ResourceRecordTypes.html\" target=\"_blank\" rel=\"noreferrer noopener\">Supported DNS record types<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/route-53-concepts.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Route\u00a053 concepts<\/a>)<\/li>\n\n\n\n<li>DNS logging and monitoring\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/logging-monitoring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging and monitoring in Amazon Route\u00a053<\/a>)<\/li>\n\n\n\n<li>Amazon Route 53 features (for example, alias records, traffic policies, resolvers, health checks)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/dns-failover.html\" target=\"_blank\" rel=\"noreferrer noopener\">Creating Amazon Route\u00a053 health checks and configuring DNS failover<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/health-checks-how-route-53-chooses-records.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Route\u00a053 chooses records when health checking<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/route53\/faqs\/\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Route 53 FAQs<\/a>)<\/li>\n\n\n\n<li>Integration of Route 53 with other AWS networking services (for example, Amazon VPC)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/integration-with-other-services.html\" target=\"_blank\" rel=\"noreferrer noopener\">Integration with other services<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver.html\" target=\"_blank\" rel=\"noreferrer noopener\">Resolving DNS queries between VPCs and your network<\/a>)<\/li>\n\n\n\n<li>Integration of Route 53 with hybrid, multi-account, and multi-Region options\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/architecture\/using-route-53-private-hosted-zones-for-cross-account-multi-region-architectures\/\" target=\"_blank\" rel=\"noreferrer noopener\">Using Route 53 Private Hosted Zones for Cross-account Multi-region Architectures<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/security\/simplify-dns-management-in-a-multiaccount-environment-with-route-53-resolver\/\" target=\"_blank\" rel=\"noreferrer noopener\">Simplify DNS management in a multi-account environment<\/a>)<\/li>\n\n\n\n<li>Domain Registration\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/domain-register.html\" target=\"_blank\" rel=\"noreferrer noopener\">Registering a new domain<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Using Route 53 public hosted zones\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/CreatingHostedZone.html\" target=\"_blank\" rel=\"noreferrer noopener\">Creating a public hosted zone<\/a>)<\/li>\n\n\n\n<li>Using Route 53 private hosted zones\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/hosted-zones-private.html\" target=\"_blank\" rel=\"noreferrer noopener\">Working with private hosted zones<\/a>)<\/li>\n\n\n\n<li>Using Route 53 Resolver endpoints in hybrid and AWS architectures\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/set-up-integrated-dns-resolution-for-hybrid-networks-in-amazon-route-53.html\" target=\"_blank\" rel=\"noreferrer noopener\">Set up integrated DNS resolution for hybrid networks in Amazon Route 53<\/a>)<\/li>\n\n\n\n<li>Using Route 53 for global traffic management\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/Welcome.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Route\u00a053<\/a>)<\/li>\n\n\n\n<li>Creating and managing domain registrations\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/domain-register.html\" target=\"_blank\" rel=\"noreferrer noopener\">Registering a new domain<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 1.3: Design solutions that integrate load balancing to meet high availability, scalability,<br>and security requirements.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>How load balancing works at layer 3, layer 4, and layer 7 of the OSI model\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonECS\/latest\/developerguide\/load-balancer-types.html\" target=\"_blank\" rel=\"noreferrer noopener\">Load balancer types<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/elasticloadbalancing\/features\/\" target=\"_blank\" rel=\"noreferrer noopener\">Elastic Load Balancing features<\/a>)<\/li>\n\n\n\n<li>Different types of load balancers and how they meet requirements for network design, high availability, and security\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonECS\/latest\/developerguide\/load-balancer-types.html\" target=\"_blank\" rel=\"noreferrer noopener\">Load balancer types<\/a>)<\/li>\n\n\n\n<li>Connectivity patterns that apply to load balancing based on the use case (for example, internal load balancers, external load balancers)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/application-load-balancers.html\" target=\"_blank\" rel=\"noreferrer noopener\">Application Load Balancers<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/elasticloadbalancing\/features\/\" target=\"_blank\" rel=\"noreferrer noopener\">Elastic Load Balancing features<\/a>)<\/li>\n\n\n\n<li>Scaling factors for load balancers<\/li>\n\n\n\n<li>Integrations of load balancers and other AWS services (for example, Global Accelerator, CloudFront, AWS WAF, Route 53, Amazon Elastic Kubernetes Service [Amazon EKS], AWS Certificate Manager [ACM])\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/config\/latest\/developerguide\/resource-config-reference.html\" target=\"_blank\" rel=\"noreferrer noopener\">Supported Resource Types<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSCloudFormation\/latest\/UserGuide\/aws-resource-eks-cluster.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS::EKS::Cluster<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/pt_br\/AWSCloudFormation\/latest\/UserGuide\/aws-resource-globalaccelerator-accelerator.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS::GlobalAccelerator::Accelerator<\/a>)<\/li>\n\n\n\n<li>Configuration options for load balancers (for example, proxy protocol, cross-zone load balancing, session affinity [sticky sessions], routing algorithms)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/network\/load-balancer-target-groups.html\" target=\"_blank\" rel=\"noreferrer noopener\">Target groups for your Network Load Balancers<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/classic\/elb-sticky-sessions.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configure sticky sessions for your Classic Load Balancer<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/sticky-sessions.html\" target=\"_blank\" rel=\"noreferrer noopener\">Sticky sessions for your Application Load Balancer<\/a>)<\/li>\n\n\n\n<li>Configuration options for load balancer target groups (for example, TCP, GENEVE, IP compared with instance)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/APIReference\/API_CreateTargetGroup.html\" target=\"_blank\" rel=\"noreferrer noopener\">CreateTargetGroup<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/network\/load-balancer-target-groups.html\" target=\"_blank\" rel=\"noreferrer noopener\">Target groups for your Network Load Balancers<\/a>)<\/li>\n\n\n\n<li>AWS Load Balancer Controller for Kubernetes clusters\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/eks\/latest\/userguide\/aws-load-balancer-controller.html\" target=\"_blank\" rel=\"noreferrer noopener\">Installing the AWS Load Balancer Controller add-on<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/eks\/latest\/userguide\/alb-ingress.html\" target=\"_blank\" rel=\"noreferrer noopener\">Application load balancing on Amazon EKS<\/a>)<\/li>\n\n\n\n<li>Considerations for encryption and authentication with load balancers (for example, TLS termination, TLS passthrough)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/network\/create-tls-listener.html\" target=\"_blank\" rel=\"noreferrer noopener\">TLS listeners for your Network Load Balancer<\/a>,<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/create-https-listener.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a0Create an HTTPS listener for your Application Load Balancer<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Selecting an appropriate load balancer based on the use case\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/application-load-balancers.html\" target=\"_blank\" rel=\"noreferrer noopener\">Application Load Balancers<\/a>)<\/li>\n\n\n\n<li>Integrating auto-scaling with load balancing solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/autoscaling\/ec2\/userguide\/attach-load-balancer-asg.html\" target=\"_blank\" rel=\"noreferrer noopener\">Attach a load balancer to your Auto Scaling group<\/a>)<\/li>\n\n\n\n<li>Integrating load balancers with existing application deployments\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/codedeploy\/latest\/userguide\/integrations-aws-elastic-load-balancing.html\" target=\"_blank\" rel=\"noreferrer noopener\">Integrating CodeDeploy with Elastic Load Balancing<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 1.4: Define logging and monitoring requirements across AWS and hybrid networks.<br>Knowledge of:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Amazon CloudWatch metrics, agents, logs, alarms, dashboards, and insights in AWS architectures to provide visibility\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/monitoring\/WhatIsCloudWatch.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon CloudWatch<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/monitoring\/cloudwatch_architecture.html\" target=\"_blank\" rel=\"noreferrer noopener\">How Amazon CloudWatch works<\/a>)<\/li>\n\n\n\n<li>AWS Transit Gateway Network Manager in architectures to provide visibility\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgwnm\/network-manager-getting-started.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Network Manager for Transit Gateway networks<\/a>)<\/li>\n\n\n\n<li>VPC Reachability Analyzer in architectures to provide visibility\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/reachability\/what-is-reachability-analyzer.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPC Reachability Analyzer<\/a>)<\/li>\n\n\n\n<li>Flow logs and traffic mirroring in architecture to provide visibility\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/mirroring\/what-is-traffic-mirroring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Traffic Mirroring<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/using-vpc-traffic-mirroring-to-monitor-and-secure-your-aws-infrastructure\/\" target=\"_blank\" rel=\"noreferrer noopener\">Using VPC Traffic Mirroring to monitor and secure your AWS infrastructure<\/a>)<\/li>\n\n\n\n<li>Access logging (for example, load balancers, CloudFront)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/load-balancer-access-logs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Access logs for your Application Load Balancer<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Identifying the logging and monitoring requirements\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/implementing-logging-monitoring-cloudwatch\/welcome.html\" target=\"_blank\" rel=\"noreferrer noopener\">Designing and implementing logging and monitoring with Amazon CloudWatch<\/a>)<\/li>\n\n\n\n<li>Recommending appropriate metrics to provide visibility of the network status\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/viewing_metrics_with_cloudwatch.html\" target=\"_blank\" rel=\"noreferrer noopener\">List the available CloudWatch metrics for your instances<\/a>)<\/li>\n\n\n\n<li>Capturing baseline network performance\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/WindowsGuide\/ec2-instance-network-bandwidth.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon EC2 instance network bandwidth<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 1.5: Design a routing strategy and connectivity architecture between on-premises<br>networks and the AWS Cloud.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Routing fundamentals (for example, dynamic compared with static, BGP)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpn\/latest\/s2svpn\/VPNRoutingTypes.html\" target=\"_blank\" rel=\"noreferrer noopener\">Site-to-Site VPN routing options<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpn\/latest\/s2svpn\/cgw-dynamic-routing-examples.html\" target=\"_blank\" rel=\"noreferrer noopener\">customer gateway device configurations for dynamic routing (BGP)<\/a>)<\/li>\n\n\n\n<li>Layer 1 and layer 2 concepts for physical interconnects (for example, VLAN, link aggregation group [LAG], optics, jumbo frames)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/lags.html\" target=\"_blank\" rel=\"noreferrer noopener\">Link aggregation groups<\/a>)<\/li>\n\n\n\n<li>Encapsulation and encryption technologies (for example, Generic Routing Encapsulation [GRE], IPsec)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/simplify-sd-wan-connectivity-with-aws-transit-gateway-connect\/\" target=\"_blank\" rel=\"noreferrer noopener\">Simplify SD-WAN connectivity with AWS Transit Gateway Connect<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpn\/latest\/s2svpn\/your-cgw.html\" target=\"_blank\" rel=\"noreferrer noopener\">Your customer gateway device<\/a>)<\/li>\n\n\n\n<li>Resource sharing across AWS accounts\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/ram\/latest\/userguide\/getting-started-sharing.html\" target=\"_blank\" rel=\"noreferrer noopener\">Sharing your AWS resources<\/a>)<\/li>\n\n\n\n<li>Overlay networks\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/sap\/latest\/sap-hana\/sap-oip-overlay-ip-routing-using-aws-transit-gateway.html\" target=\"_blank\" rel=\"noreferrer noopener\">Overlay IP Routing using AWS Transit Gateway<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Identifying the requirements for hybrid connectivity\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/hybrid-connectivity\/connectivity-models.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connectivity models<\/a>)<\/li>\n\n\n\n<li>Designing a redundant hybrid connectivity model with AWS services (for example, AWS Direct Connect, AWS Site-to-Site VPN)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/hybrid-connectivity.html\" target=\"_blank\" rel=\"noreferrer noopener\">Hybrid connectivity<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/hybrid-connectivity\/vpn-connection-as-a-backup-to-aws-dx-connection-example.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPN connection as a backup<\/a>)<\/li>\n\n\n\n<li>Designing BGP routing with BGP attributes to influence the traffic flows based on the desired traffic patterns (load sharing, active\/passive)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/routing-and-bgp.html\" target=\"_blank\" rel=\"noreferrer noopener\">Routing policies and BGP communities<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/creating-active-passive-bgp-connections-over-aws-direct-connect\/\" target=\"_blank\" rel=\"noreferrer noopener\">Creating active\/passive BGP connections over AWS Direct Connect<\/a>)<\/li>\n\n\n\n<li>Designing for integration of a software-defined wide area network (SD-WAN) with AWS (for example, Transit Gateway Connect, overlay networks)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/simplify-sd-wan-connectivity-with-aws-transit-gateway-connect\/\" target=\"_blank\" rel=\"noreferrer noopener\">Simplify SD-WAN connectivity with AWS Transit Gateway Connect<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 1.6: Design a routing strategy and connectivity architecture that includes multiple AWS<br>accounts, AWS Regions, and VPCs to support different connectivity patterns.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Different connectivity patterns and use cases (for example, VPC peering, Transit Gateway, AWS PrivateLink)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/aws-privatelink.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS PrivateLink<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-peering.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect VPCs using VPC peering<\/a>)<\/li>\n\n\n\n<li>Capabilities and advantages of VPC sharing\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-sharing.html\" target=\"_blank\" rel=\"noreferrer noopener\">Share your VPC with other accounts<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/amazon-vpc-sharing.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPC sharing<\/a>)<\/li>\n\n\n\n<li>IP subnets and solutions accounting for IP address overlaps<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Connecting multiple VPCs by using the most appropriate services based on requirements (for example, using VPC peering, Transit Gateway, PrivateLink)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/vpc-to-vpc-connectivity.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPC to VPC connectivity<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-peering.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect VPCs using VPC peering<\/a>)<\/li>\n\n\n\n<li>Using VPC sharing in a multi-account setup\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-sharing.html\" target=\"_blank\" rel=\"noreferrer noopener\">Share your VPC with other accounts<\/a>)<\/li>\n\n\n\n<li>Managing IP overlaps by using different available services and options (for example, NAT, PrivateLink, Transit Gateway routing)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/aws-privatelink.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS PrivateLink<\/a>)<\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Domain 2: Network Implementation (26%)<\/strong><\/h5>\n\n\n\n<p><strong>Task Statement 2.1: Implement routing and connectivity between on-premises networks and the AWS Cloud.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Routing protocols (for example, static, dynamic)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpn\/latest\/s2svpn\/VPNRoutingTypes.html\" target=\"_blank\" rel=\"noreferrer noopener\">Site-to-Site VPN routing options<\/a>)<\/li>\n\n\n\n<li>VPNs (for example, security, accelerated VPN)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpn\/latest\/s2svpn\/accelerated-vpn.html\" target=\"_blank\" rel=\"noreferrer noopener\">Accelerated Site-to-Site VPN connections<\/a>)<\/li>\n\n\n\n<li>Layer 1 and types of hardware to use (for example, Letter of Authorization [LOA] documents, colocation facilities, Direct Connect)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/getting_started.html\" target=\"_blank\" rel=\"noreferrer noopener\">Classic<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/Colocation.html\" target=\"_blank\" rel=\"noreferrer noopener\">Requesting cross connects at AWS Direct Connect locations<\/a>)<\/li>\n\n\n\n<li>Layer 2 and layer 3 (for example, VLANs, IP addressing, gateways, routing, switching)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/apn\/amazon-vpc-for-on-premises-network-engineers-part-one\/\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon VPC for On-Premises Network Engineers<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/route-table-options.html\" target=\"_blank\" rel=\"noreferrer noopener\">Example routing options<\/a>)<\/li>\n\n\n\n<li>Traffic management and SD-WAN (for example, Transit Gateway Connect)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/simplify-sd-wan-connectivity-with-aws-transit-gateway-connect\/\" target=\"_blank\" rel=\"noreferrer noopener\">Simplify SD-WAN connectivity with AWS Transit Gateway Connect<\/a>)<\/li>\n\n\n\n<li>DNS (for example, conditional forwarding, hosted zones, resolvers)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver.html\" target=\"_blank\" rel=\"noreferrer noopener\">Resolving DNS queries between VPCs and your network<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver-rules-managing.html\" target=\"_blank\" rel=\"noreferrer noopener\">Managing forwarding rules<\/a>)<\/li>\n\n\n\n<li>Security appliances (for example, firewalls)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/network-firewall\/latest\/developerguide\/what-is-aws-network-firewall.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Network Firewall<\/a>)<\/li>\n\n\n\n<li>Load balancing (for example, layer 4 compared with layer 7, reverse proxies, layer 3)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/elasticloadbalancing\/features\/\" target=\"_blank\" rel=\"noreferrer noopener\">Elastic Load Balancing features<\/a>)<\/li>\n\n\n\n<li>Infrastructure automation\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/running-containerized-microservices\/infrastructure-automation.html\" target=\"_blank\" rel=\"noreferrer noopener\">Infrastructure Automation<\/a>)<\/li>\n\n\n\n<li>AWS Organizations and AWS Resource Access Manager (AWS RAM) (for example, multiaccount Transit Gateway, Direct Connect, Amazon VPC, Route 53)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/ram\/latest\/userguide\/shareable.html\" target=\"_blank\" rel=\"noreferrer noopener\">Shareable AWS resources<\/a>)<\/li>\n\n\n\n<li>Test connectivity (for example, Route Analyzer, Reachability Analyzer)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/reachability\/what-is-reachability-analyzer.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPC Reachability Analyzer<\/a>)<\/li>\n\n\n\n<li>Networking services of VPCs\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/what-is-amazon-vpc.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon VPC<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Configuring the physical network requirements for hybrid connectivity solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/hybrid-connectivity\/hybrid-network-connection.html\" target=\"_blank\" rel=\"noreferrer noopener\">Hybrid network connection<\/a>)<\/li>\n\n\n\n<li>Configuring static or dynamic routing protocols to work with hybrid connectivity solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/simplify-sd-wan-connectivity-with-aws-transit-gateway-connect\/\" target=\"_blank\" rel=\"noreferrer noopener\">Simplify SD-WAN connectivity with AWS Transit Gateway Connect<\/a>)<\/li>\n\n\n\n<li>Configuring existing on-premises networks to connect with the AWS Cloud\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpn\/latest\/clientvpn-admin\/scenario-onprem.html\" target=\"_blank\" rel=\"noreferrer noopener\">Access to an on-premises network<\/a>)<\/li>\n\n\n\n<li>Configuring existing on-premises name resolution with the AWS Cloud\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/set-up-integrated-dns-resolution-for-hybrid-networks-in-amazon-route-53.html\" target=\"_blank\" rel=\"noreferrer noopener\">Set up integrated DNS resolution for hybrid networks in Amazon Route 53<\/a>)<\/li>\n\n\n\n<li>Configuring and implementing load balancing solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/elasticloadbalancing\/latest\/application\/create-application-load-balancer.html\" target=\"_blank\" rel=\"noreferrer noopener\">Create an Application Load Balancer<\/a>)<\/li>\n\n\n\n<li>Configuring network monitoring and logging for AWS services\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/network-firewall\/latest\/developerguide\/logging-monitoring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging and monitoring in AWS Network Firewall<\/a>)<\/li>\n\n\n\n<li>Testing and validating connectivity between environments\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/migration-replatforming-cots-applications\/testing-validating-application.html\" target=\"_blank\" rel=\"noreferrer noopener\">Testing and validating your applications<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 2.2: Implement routing and connectivity across multiple AWS accounts, Regions, and VPCs to support different connectivity patterns.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Inter-VPC and multi-account connectivity (for example, VPC peering, Transit Gateway, VPN, third-party vendors, SD-WAN, multiprotocol label switching [MPLS])\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-vpc-connectivity-options\/amazon-vpc-to-amazon-vpc-connectivity-options.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon VPC-to-Amazon VPC connectivity options<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/simplify-sd-wan-connectivity-with-aws-transit-gateway-connect\/\" target=\"_blank\" rel=\"noreferrer noopener\">Simplify SD-WAN connectivity with AWS Transit Gateway Connect<\/a>)<\/li>\n\n\n\n<li>Private application connectivity (for example, PrivateLink)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/endpoint-services-overview.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect your VPC to services using AWS PrivateLink<\/a>)<\/li>\n\n\n\n<li>Methods of expanding AWS networking connectivity (for example, Organizations, AWS RAM)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/organizations\/latest\/userguide\/services-that-can-integrate-ram.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Resource Access Manager and AWS Organizations<\/a>)<\/li>\n\n\n\n<li>Host and service name resolution for applications and clients (for example, DNS)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver.html\" target=\"_blank\" rel=\"noreferrer noopener\">Resolving DNS queries between VPCs and your network<\/a>)<\/li>\n\n\n\n<li>Infrastructure automation\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/running-containerized-microservices\/infrastructure-automation.html\" target=\"_blank\" rel=\"noreferrer noopener\">Infrastructure Automation<\/a>)<\/li>\n\n\n\n<li>Authentication and authorization (for example, SAML, Active Directory)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/id_roles_providers_saml.html\" target=\"_blank\" rel=\"noreferrer noopener\">About SAML 2.0-based federation<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/id_roles_providers_saml_3rd-party.html\" target=\"_blank\" rel=\"noreferrer noopener\">Integrating third-party SAML solution providers with AWS<\/a>)<\/li>\n\n\n\n<li>Security (for example, security groups, network ACLs, AWS Network Firewall)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-network-acls.html\" target=\"_blank\" rel=\"noreferrer noopener\">Control traffic to subnets using Network ACLs<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_SecurityGroups.html\" target=\"_blank\" rel=\"noreferrer noopener\">Control traffic to resources using security groups<\/a>)<\/li>\n\n\n\n<li>Test connectivity (for example, Route Analyzer, Reachability Analyzer, tooling)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/reachability\/what-is-reachability-analyzer.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPC Reachability Analyzer<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Configuring network connectivity architectures by using AWS services in a single-VPC or multiVPC design (for example, DHCP, routing, security groups)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/quickstart\/latest\/vpc\/architecture.html\" target=\"_blank\" rel=\"noreferrer noopener\">Architecture<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_SecurityGroups.html\" target=\"_blank\" rel=\"noreferrer noopener\">Control traffic to resources using security groups<\/a>)<\/li>\n\n\n\n<li>Configuring hybrid connectivity with existing third-party vendor solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/securityhub\/latest\/userguide\/securityhub-partner-providers.html\" target=\"_blank\" rel=\"noreferrer noopener\">Available third-party partner product integrations<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/hybrid-connectivity.html\" target=\"_blank\" rel=\"noreferrer noopener\">Hybrid connectivity<\/a>)<\/li>\n\n\n\n<li>Configuring a hub-and-spoke network architecture (for example, Transit Gateway, transit VPC)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/transit-vpc-solution.html\" target=\"_blank\" rel=\"noreferrer noopener\">Transit VPC solution<\/a>)<\/li>\n\n\n\n<li>Configuring a DNS solution to make hybrid connectivity possible\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/set-up-integrated-dns-resolution-for-hybrid-networks-in-amazon-route-53.html\" target=\"_blank\" rel=\"noreferrer noopener\">Set up integrated DNS resolution for hybrid networks in Amazon Route 53<\/a>)<\/li>\n\n\n\n<li>Implementing security between network boundaries<\/li>\n\n\n\n<li>Configuring network monitoring and logging by using AWS solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/config\/latest\/developerguide\/security-logging-and-monitoring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging and Monitoring in AWS Config<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 2.3: Implement complex hybrid and multi-account DNS architectures.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>When to use private hosted zones and public hosted zones\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/hosted-zones-private.html\" target=\"_blank\" rel=\"noreferrer noopener\">Working with private hosted zones<\/a>)<\/li>\n\n\n\n<li>Methods to alter traffic management (for example, based on latency, geography, weighting)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/routing-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Choosing a routing policy<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/TutorialLBRMultipleEC2InRegion.html\" target=\"_blank\" rel=\"noreferrer noopener\">Using latency and weighted records in Amazon Route\u00a053<\/a>)<\/li>\n\n\n\n<li>DNS delegation and forwarding (for example, conditional forwarding)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver-rules-managing.html\" target=\"_blank\" rel=\"noreferrer noopener\">Managing forwarding rules<\/a>)<\/li>\n\n\n\n<li>Different DNS record types (for example, A, AAAA, TXT, pointer records, alias records)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/ResourceRecordTypes.html\" target=\"_blank\" rel=\"noreferrer noopener\">Supported DNS record types<\/a>)<\/li>\n\n\n\n<li>DNSSEC<\/li>\n\n\n\n<li>How to share DNS services between accounts (for example, AWS RAM)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/ram\/latest\/userguide\/shareable.html\" target=\"_blank\" rel=\"noreferrer noopener\">Shareable AWS resources<\/a>)<\/li>\n\n\n\n<li>Requirements and implementation options for outbound and inbound endpoints\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver-getting-started.html\" target=\"_blank\" rel=\"noreferrer noopener\">Getting started with Route 53 Resolver<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Configuring DNS zones and conditional forwarding\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/managedservices\/latest\/onboardingguide\/configure-conditional-forwarder.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configure the conditional forwarder<\/a>)<\/li>\n\n\n\n<li>Configuring traffic management by using DNS solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/traffic-flow.html\" target=\"_blank\" rel=\"noreferrer noopener\">Using traffic flow to route DNS traffic<\/a>)<\/li>\n\n\n\n<li>Configuring DNS for hybrid networks\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/set-up-integrated-dns-resolution-for-hybrid-networks-in-amazon-route-53.html\" target=\"_blank\" rel=\"noreferrer noopener\">Set up integrated DNS resolution for hybrid networks in Amazon Route 53<\/a>)<\/li>\n\n\n\n<li>Configuring appropriate DNS records\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/ResourceRecordTypes.html\" target=\"_blank\" rel=\"noreferrer noopener\">Supported DNS record types<\/a>)<\/li>\n\n\n\n<li>Configuring DNSSEC on Route 53\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/domain-configure-dnssec.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configuring DNSSEC for a domain<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/dns-configuring-dnssec.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configuring DNSSEC signing in Amazon Route\u00a053<\/a>)<\/li>\n\n\n\n<li>Configuring DNS within a centralized or distributed network architecture\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/set-up-integrated-dns-resolution-for-hybrid-networks-in-amazon-route-53.html\" target=\"_blank\" rel=\"noreferrer noopener\">Set up integrated DNS resolution for hybrid networks in Amazon Route 53<\/a>)<\/li>\n\n\n\n<li>Configuring DNS monitoring and logging on Route 53\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/logging-monitoring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging and monitoring in Amazon Route\u00a053<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 2.4: Automate and configure network infrastructure.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Infrastructure as code (IaC) (for example, AWS Cloud Development Kit [AWS CDK], AWS CloudFormation, AWS CLI, AWS SDK, APIs)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/cdk\/v2\/guide\/home.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS CDK<\/a>)<\/li>\n\n\n\n<li>Event-driven network automation\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/compute\/getting-started-with-event-driven-architecture\/\" target=\"_blank\" rel=\"noreferrer noopener\">Getting Started with Event-Driven Architecture<\/a>)<\/li>\n\n\n\n<li>Common problems of using hardcoded instructions in IaC templates when provisioning cloud networking resources\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSCloudFormation\/latest\/UserGuide\/best-practices.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS CloudFormation best practices<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Creating and managing repeatable network configurations\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/best-practices-for-configuring-network-interfaces.html\" target=\"_blank\" rel=\"noreferrer noopener\">Best practices for configuring network interfaces<\/a>)<\/li>\n\n\n\n<li>Integrating event-driven networking functions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/compute\/getting-started-with-event-driven-architecture\/\" target=\"_blank\" rel=\"noreferrer noopener\">Getting Started with Event-Driven Architecture<\/a>)<\/li>\n\n\n\n<li>Integrating hybrid network automation options with AWS native IaC<\/li>\n\n\n\n<li>Eliminating risk and achieving efficiency in a cloud networking environment while maintaining the lowest possible cost<\/li>\n\n\n\n<li>Automating the process of optimizing cloud network resources with IaC\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/cloud-automation-5g-network\/cloud-automation-areas.html\" target=\"_blank\" rel=\"noreferrer noopener\">Cloud automation areas<\/a>)<\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Domain 3: Network Management and Operations (20%)<\/strong><\/h5>\n\n\n\n<p><strong>Task Statement 3.1: Maintain routing and connectivity on AWS and hybrid networks.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Industry-standard routing protocols that are used in AWS hybrid networks (for example, BGP over Direct Connect)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/routing-and-bgp.html\" target=\"_blank\" rel=\"noreferrer noopener\">Routing policies and BGP communities<\/a>)<\/li>\n\n\n\n<li>Connectivity methods for AWS and hybrid networks (for example, Direct Connect gateway, Transit Gateway, VIFs)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/direct-connect.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Direct Connect\u00a0<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/direct-connect-transit-gateways.html\" target=\"_blank\" rel=\"noreferrer noopener\">Transit gateway associations<\/a>)<\/li>\n\n\n\n<li>How limits and quotas affect AWS networking services (for example, bandwidth limits, route limits)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgw\/transit-gateway-quotas.html\" target=\"_blank\" rel=\"noreferrer noopener\">Quotas for your transit gateways<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/amazon-vpc-limits.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon VPC quotas<\/a>)<\/li>\n\n\n\n<li>Available private and public access methods for custom services (for example, PrivateLink, VPC peering)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-peering.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect VPCs using VPC peering<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/endpoint-services-overview.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect your VPC to services using AWS PrivateLink<\/a>)<\/li>\n\n\n\n<li>Available inter-Regional and intra-Regional communication patterns\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/automate-the-setup-of-inter-region-peering-with-aws-transit-gateway.html\" target=\"_blank\" rel=\"noreferrer noopener\">Automate the setup of inter-Region peering with AWS Transit Gateway<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Managing routing protocols for AWS and hybrid connectivity options (for example, over a Direct Connect connection, VPN)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpn-connections.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect your VPC to remote networks using AWS Virtual Private Network<\/a>)<\/li>\n\n\n\n<li>Maintaining private access to custom services (for example, PrivateLink, VPC peering)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpc-peering.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect VPCs using VPC peering<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/endpoint-services-overview.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect your VPC to services using AWS PrivateLink<\/a>)<\/li>\n\n\n\n<li>Using route tables to direct traffic appropriately (for example, automatic propagation, BGP)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_Route_Tables.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configure route tables<\/a>)<\/li>\n\n\n\n<li>Setting up private access or public access to AWS services (for example, Direct Connect, VPN)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/vpn-connections.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect your VPC to remote networks using AWS Virtual Private Network<\/a>)<\/li>\n\n\n\n<li>Optimizing routing over dynamic and static routing protocols (for example, summarizing routes, CIDR overlap)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 3.2: Monitor and analyze network traffic to troubleshoot and optimize connectivity patterns.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Network performance metrics and reachability constraints (for example, routing, packet size)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/monitoring-network-performance-ena.html\" target=\"_blank\" rel=\"noreferrer noopener\">Monitor network performance for your EC2 instance<\/a>)<\/li>\n\n\n\n<li>Appropriate logs and metrics to assess network performance and reachability issues (for example, packet loss)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/premiumsupport\/knowledge-center\/troubleshoot-vpn-packet-loss\/\" target=\"_blank\" rel=\"noreferrer noopener\">troubleshoot packet loss on my VPN<\/a>,\u00a0<a href=\"https:\/\/aws.amazon.com\/premiumsupport\/knowledge-center\/network-issue-vpc-onprem-ig\/\" target=\"_blank\" rel=\"noreferrer noopener\">troubleshoot network performance issues<\/a>)<\/li>\n\n\n\n<li>Tools to collect and analyze logs and metrics (for example, CloudWatch, VPC Flow Logs, VPC Traffic Mirroring)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/flow-logs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging IP traffic using VPC Flow Logs<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/mirroring\/what-is-traffic-mirroring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Traffic Mirroring<\/a>)<\/li>\n\n\n\n<li>Tools to analyze routing patterns and issues (for example, Reachability Analyzer, Transit Gateway Network Manager)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgwnm\/route-analyzer.html\" target=\"_blank\" rel=\"noreferrer noopener\">Route Analyzer<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Analyzing tool output to assess network performance and troubleshoot connectivity (for example, VPC Flow Logs, Amazon CloudWatch Logs)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/flow-logs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging IP traffic using VPC Flow Logs<\/a>)<\/li>\n\n\n\n<li>Mapping or understanding network topology (for example, Transit Gateway Network Manager)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgwnm\/what-is-network-manager.html\" target=\"_blank\" rel=\"noreferrer noopener\">Network Manager<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgwnm\/network-manager-getting-started.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Network Manager for Transit Gateway networks<\/a>)<\/li>\n\n\n\n<li>Analyzing packets to identify issues in packet shaping (for example, VPC Traffic Mirroring)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/using-vpc-traffic-mirroring-to-monitor-and-secure-your-aws-infrastructure\/\" target=\"_blank\" rel=\"noreferrer noopener\">Using VPC Traffic Mirroring to monitor and secure your AWS infrastructure<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/mirroring\/what-is-traffic-mirroring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Traffic Mirroring<\/a>)<\/li>\n\n\n\n<li>Troubleshooting connectivity issues that are caused by network misconfiguration (for example, Reachability Analyzer)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/reachability\/what-is-reachability-analyzer.html\" target=\"_blank\" rel=\"noreferrer noopener\">VPC Reachability Analyzer<\/a>)<\/li>\n\n\n\n<li>Verifying that a network configuration meets network design requirements (for example, Reachability Analyzer)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/reachability\/getting-started.html\" target=\"_blank\" rel=\"noreferrer noopener\">Getting started with VPC Reachability Analyzer<\/a>)<\/li>\n\n\n\n<li>Automating the verification of connectivity intent as a network configuration changes (for example, Reachability Analyzer)<\/li>\n\n\n\n<li>Troubleshooting packet size mismatches in a VPC to restore network connectivity\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/premiumsupport\/knowledge-center\/network-issue-vpc-onprem-ig\/\" target=\"_blank\" rel=\"noreferrer noopener\">troubleshoot network performance issues<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 3.3: Optimize AWS networks for performance, reliability, and cost-effectiveness.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Situations in which a VPC peer or a transit gateway are appropriate\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgw\/what-is-transit-gateway.html\" target=\"_blank\" rel=\"noreferrer noopener\">transit gateway<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgw\/tgw-peering.html\" target=\"_blank\" rel=\"noreferrer noopener\">Transit gateway peering attachments<\/a>)<\/li>\n\n\n\n<li>Different methods to reduce bandwidth utilization (for example, unicast compared with multicast, CloudFront)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudFront\/latest\/DeveloperGuide\/usage-charts.html\" target=\"_blank\" rel=\"noreferrer noopener\">CloudFront usage reports<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudFront\/latest\/DeveloperGuide\/IntroductionUseCases.html\" target=\"_blank\" rel=\"noreferrer noopener\">CloudFront use cases<\/a>)<\/li>\n\n\n\n<li>Cost-effective connectivity options for data transfer between a VPC and on-premises environments\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/wellarchitected\/latest\/hybrid-networking-lens\/cost-optimization-pillar.html\" target=\"_blank\" rel=\"noreferrer noopener\">Cost optimization pillar<\/a>)<\/li>\n\n\n\n<li>Different types of network interfaces on AWS\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/using-eni.html\" target=\"_blank\" rel=\"noreferrer noopener\">Elastic network interfaces<\/a>)<\/li>\n\n\n\n<li>High-availability features in Route 53 (for example, DNS load balancing using health checks with latency and weighted record sets)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/dns-failover.html\" target=\"_blank\" rel=\"noreferrer noopener\">Creating Amazon Route\u00a053 health checks and configuring DNS failover<\/a>)<\/li>\n\n\n\n<li>Availability of options from Route 53 that provide reliability\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/route53\/faqs\/\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Route 53 FAQs<\/a>)<\/li>\n\n\n\n<li>Load balancing and traffic distribution patterns\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/elasticloadbalancing\/features\/\" target=\"_blank\" rel=\"noreferrer noopener\">Elastic Load Balancing features<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/autoscaling\/ec2\/userguide\/autoscaling-load-balancer.html\" target=\"_blank\" rel=\"noreferrer noopener\">Use Elastic Load Balancing to distribute traffic<\/a>)<\/li>\n\n\n\n<li>VPC subnet optimization\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/configure-subnets.html\" target=\"_blank\" rel=\"noreferrer noopener\">Subnets for your VPC<\/a>)<\/li>\n\n\n\n<li>Frame size optimization for bandwidth across different connection types\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/ec2\/instance-types\/\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon EC2 Instance Types<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Optimizing for network throughput\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/WindowsGuide\/ec2-instance-network-bandwidth.html\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon EC2 instance network bandwidth<\/a>)<\/li>\n\n\n\n<li>Selecting the right network interface for the best performance (for example, elastic network interface, Elastic Network Adapter [ENA], Elastic Fabric Adapter [EFA])\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/efa.html\" target=\"_blank\" rel=\"noreferrer noopener\">Elastic Fabric Adapter<\/a>)<\/li>\n\n\n\n<li>Choosing between VPC peering, proxy patterns, or a transit gateway connection based on analysis of the network requirements provided\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgw\/tgw-best-design-practices.html\" target=\"_blank\" rel=\"noreferrer noopener\">Transit gateway design best practices<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/automate-the-setup-of-inter-region-peering-with-aws-transit-gateway.html\" target=\"_blank\" rel=\"noreferrer noopener\">Automate the setup of inter-Region peering<\/a>)<\/li>\n\n\n\n<li>Implementing a solution on an appropriate network connectivity service (for example, VPC peering, Transit Gateway, VPN connection) to meet network requirements\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/transit-vpc-solution.html\" target=\"_blank\" rel=\"noreferrer noopener\">Transit VPC solution<\/a>)<\/li>\n\n\n\n<li>Implementing a multicast capability within a VPC and on-premises environments\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/tgw\/working-with-multicast.html\" target=\"_blank\" rel=\"noreferrer noopener\">Working with multicast<\/a>)<\/li>\n\n\n\n<li>Creating Route 53 public hosted zones and private hosted zones and records to optimize application availability (for example, private zonal DNS entry to route traffic to multiple Availability Zones)<\/li>\n\n\n\n<li>Updating and optimizing subnets for auto-scaling configurations to support the increased application load\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/autoscaling\/ec2\/APIReference\/API_UpdateAutoScalingGroup.html\" target=\"_blank\" rel=\"noreferrer noopener\">UpdateAutoScalingGroup<\/a>)<\/li>\n\n\n\n<li>Updating and optimizing subnets to prevent the depletion of available IP addresses within a VPC (for example, secondary CIDR)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/configure-subnets.html\" target=\"_blank\" rel=\"noreferrer noopener\">Subnets for your VPC<\/a>)<\/li>\n\n\n\n<li>Configuring jumbo frame support across connection types\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/network_mtu.html\" target=\"_blank\" rel=\"noreferrer noopener\">Network maximum transmission unit (MTU) for your EC2 instance<\/a>)<\/li>\n\n\n\n<li>Optimizing network connectivity by using Global Accelerator to improve network performance and application availability\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/global-accelerator\/latest\/dg\/what-is-global-accelerator.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Global Accelerator<\/a>)<\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Domain 4: Network Security, Compliance, and Governance (24%)<\/strong><\/h5>\n\n\n\n<p><strong>Task Statement 4.1: Implement and maintain network features to meet security and compliance needs and requirements.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Different threat models based on application architecture<\/li>\n\n\n\n<li>Common security threats\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-overview\/security-and-compliance.html\" target=\"_blank\" rel=\"noreferrer noopener\">Security and compliance<\/a>)<\/li>\n\n\n\n<li>Mechanisms to secure different application flows<\/li>\n\n\n\n<li>AWS network architecture that meets security and compliance requirements<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Securing inbound traffic flows into AWS (for example, AWS WAF, AWS Shield, Network Firewall)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/what-is-aws-waf.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS WAF, AWS Shield, and AWS Firewall Manager<\/a>)<\/li>\n\n\n\n<li>Securing outbound traffic flows from AWS (for example, Network Firewall, proxies, Gateway Load Balancers)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/network-firewall\/latest\/developerguide\/architectures.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Network Firewall example architectures with routing<\/a>)<\/li>\n\n\n\n<li>Securing inter-VPC traffic within an account or across multiple accounts (for example, security groups, network ACLs, VPC endpoint policies)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/VPC_Security.html\" target=\"_blank\" rel=\"noreferrer noopener\">Internetwork traffic privacy in Amazon VPC<\/a>)<\/li>\n\n\n\n<li>Implementing an AWS network architecture to meet security and compliance requirements (for example, untrusted network, perimeter VPC, three-tier architecture)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/quickstart\/latest\/vpc\/architecture.html\" target=\"_blank\" rel=\"noreferrer noopener\">Architecture<\/a>)<\/li>\n\n\n\n<li>Developing a threat model and identifying appropriate mitigation strategies for a given network architecture<\/li>\n\n\n\n<li>Testing compliance with the initial requirements (for example, failover test, resiliency)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/resiliency_failover.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Direct Connect Failover Test<\/a>)<\/li>\n\n\n\n<li>Automating security incident reporting and alerting using AWS\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-security-incident-response-guide\/automating-incident-response.html\" target=\"_blank\" rel=\"noreferrer noopener\">Automating Incident Response<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 4.2: Validate and audit security by using network monitoring and logging services.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Network monitoring and logging services that are available in AWS (for example, CloudWatch, AWS CloudTrail, VPC Traffic Mirroring, VPC Flow Logs, Transit Gateway Network Manager)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/flow-logs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging IP traffic using VPC Flow Logs<\/a>)<\/li>\n\n\n\n<li>Alert mechanisms (for example, CloudWatch alarms)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/monitoring\/AlarmThatSendsEmail.html\" target=\"_blank\" rel=\"noreferrer noopener\">Using Amazon CloudWatch alarms<\/a>)<\/li>\n\n\n\n<li>Log creation in different AWS services (for example, VPC flow logs, load balancer access logs, CloudFront access logs)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudFront\/latest\/DeveloperGuide\/AccessLogs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configuring and using standard logs (access logs)<\/a>)<\/li>\n\n\n\n<li>Log delivery mechanisms (for example, Amazon Kinesis, Route 53, CloudWatch)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/logging-monitoring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging and monitoring in Amazon Route\u00a053<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/firehose\/latest\/dev\/writing-with-cloudwatch-logs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Writing to Kinesis Data Firehose Using CloudWatch Logs<\/a>)<\/li>\n\n\n\n<li>Mechanisms to audit network security configurations (for example, security groups, AWS Firewall Manager, AWS Trusted Advisor)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/security-group-policies.html\" target=\"_blank\" rel=\"noreferrer noopener\">Security group policies<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Creating and analyzing a VPC flow log (including base and extended fields of flow logs)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/flow-logs.html\" target=\"_blank\" rel=\"noreferrer noopener\">Logging IP traffic using VPC Flow Logs<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/flow-logs-records-examples.html\" target=\"_blank\" rel=\"noreferrer noopener\">Flow log record examples<\/a>)<\/li>\n\n\n\n<li>Creating and analyzing network traffic mirroring (for example, using VPC Traffic Mirroring)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/using-vpc-traffic-mirroring-to-monitor-and-secure-your-aws-infrastructure\/\" target=\"_blank\" rel=\"noreferrer noopener\">Using VPC Traffic Mirroring to monitor and secure your AWS infrastructure<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/mirroring\/what-is-traffic-mirroring.html\" target=\"_blank\" rel=\"noreferrer noopener\">Traffic Mirroring<\/a>)<\/li>\n\n\n\n<li>Implementing automated alarms by using CloudWatch\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/using-cloudwatch-createalarm.html\" target=\"_blank\" rel=\"noreferrer noopener\">Create a CloudWatch alarm for an instance<\/a>)<\/li>\n\n\n\n<li>Implementing customized metrics by using CloudWatch\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/monitoring\/publishingMetrics.html\" target=\"_blank\" rel=\"noreferrer noopener\">Publishing custom metrics<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/managedservices\/latest\/userguide\/custom-cloudwatch-events.html\" target=\"_blank\" rel=\"noreferrer noopener\">Creating custom CloudWatch metrics and alarms<\/a>)<\/li>\n\n\n\n<li>Correlating and analyzing information across single or multiple AWS log sources\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/implementing-logging-monitoring-cloudwatch\/cloudwatch-search-analysis.html\" target=\"_blank\" rel=\"noreferrer noopener\">Searching and analyzing logs in CloudWatch<\/a>)<\/li>\n\n\n\n<li>Implementing log delivery solutions\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/logs\/AWS-logs-and-resource-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Enabling logging from certain AWS services<\/a>)<\/li>\n\n\n\n<li>Implementing a network audit strategy across single or multiple AWS network services and accounts (for example, Firewall Manager, security groups, network ACLs)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/waf\/latest\/developerguide\/security-group-policies.html\" target=\"_blank\" rel=\"noreferrer noopener\">Security group policies<\/a>)<\/li>\n<\/ul>\n\n\n\n<p><strong>Task Statement 4.3: Implement and maintain the confidentiality of data and communications of the network.<\/strong><\/p>\n\n\n\n<p>Knowledge of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Network encryption options that are available on AWS\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/UsingEncryption.html\" target=\"_blank\" rel=\"noreferrer noopener\">Protecting data using encryption<\/a>)<\/li>\n\n\n\n<li>VPN connectivity over Direct Connect\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-vpc-connectivity-options\/aws-direct-connect-vpn.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Direct Connect + VPN<\/a>)<\/li>\n\n\n\n<li>Encryption methods for data in transit (for example, IPsec)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/logical-separation\/encrypting-data-at-rest-and--in-transit.html\" target=\"_blank\" rel=\"noreferrer noopener\">Encrypting Data-at-Rest and -in-Transit<\/a>)<\/li>\n\n\n\n<li>Network encryption under the AWS shared responsibility model Network encryption under the AWS\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-risk-and-compliance\/shared-responsibility-model.html\" target=\"_blank\" rel=\"noreferrer noopener\">shared responsibility model<\/a>)<\/li>\n\n\n\n<li>Security methods for DNS communications (for example, DNSSEC)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/domain-configure-dnssec.html\" target=\"_blank\" rel=\"noreferrer noopener\">Configuring DNSSEC for a domain<\/a>)<\/li>\n<\/ul>\n\n\n\n<p>Skills in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Implementing network encryption methods to meet application compliance requirements (for example, IPsec, TLS)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/wellarchitected\/latest\/security-pillar\/protecting-data-in-transit.html\" target=\"_blank\" rel=\"noreferrer noopener\">Protecting Data in Transit<\/a>)<\/li>\n\n\n\n<li>Implementing encryption solutions to secure data in transit (for example, CloudFront, Application Load Balancers and Network Load Balancers, VPN over Direct Connect, AWS managed databases, Amazon S3, custom solutions on Amazon EC2, Transit Gateway)\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/securityhub\/latest\/userguide\/securityhub-standards-fsbp-controls.html\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Foundational Security Best Practices controls<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/aws-overview\/networking-services.html\" target=\"_blank\" rel=\"noreferrer noopener\">Networking and Content Delivery<\/a>,\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/prescriptive-guidance\/latest\/patterns\/connect-to-application-migration-service-data-and-control-planes-over-a-private-network.html\" target=\"_blank\" rel=\"noreferrer noopener\">Connect to Application Migration Service data<\/a>)<\/li>\n\n\n\n<li>Implementing a certificate management solution by using a certificate authority (for example, ACM, AWS Certificate Manager Private Certificate Authority [ACM PCA])\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/acm-pca\/latest\/userguide\/PcaWelcome.html\" target=\"_blank\" rel=\"noreferrer noopener\">ACM Private CA<\/a>)<\/li>\n\n\n\n<li>Implementing secure DNS communications\u00a0<strong>(AWS Documentation:<\/strong>\u00a0<a href=\"https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/building-scalable-secure-multi-vpc-network-infrastructure\/dns.html\" target=\"_blank\" rel=\"noreferrer noopener\">DNS<\/a>)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center has-white-color has-vivid-cyan-blue-background-color has-text-color has-background has-link-color wp-elements-1c4ab63f42d5f6283449c8fa201a6a3e\"><strong>AWS Certified Advanced Networking Specialty Exam Step-by-Step Study Plan<\/strong><\/h2>\n\n\n\n<p>Preparing for the AWS Advanced Networking \u2013 Specialty exam requires both a strong foundation in cloud networking and structured hands-on practice. Below is a week-by-week plan designed for 6\u20138 weeks of focused preparation. You can adjust the pace depending on your experience level.<\/p>\n\n\n\n<p><strong>Week 1: Understand the Exam Framework<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Download and review the official AWS exam guide and sample questions<\/li>\n\n\n\n<li>Study the six key domains and their weighting<\/li>\n\n\n\n<li>Set up your study calendar<\/li>\n\n\n\n<li>Sign up for a free AWS account or use AWS Skill Builder labs<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Get familiar with what will be tested and how the exam is structured<\/p>\n\n\n\n<p><strong>Week 2: Hybrid Networking and Connectivity<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Deep dive into AWS Direct Connect, Site-to-Site VPN, and hybrid architectures<\/li>\n\n\n\n<li>Practice setting up VPN tunnels, BGP, and routing policies<\/li>\n\n\n\n<li>Understand how to design failover between VPN and Direct Connect<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Master hybrid and cross-site networking configurations<\/p>\n\n\n\n<p><strong>Week 3: VPC Design, Peering, and Multi-Account Networking<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Explore VPC architectures, subnetting, and CIDR management<\/li>\n\n\n\n<li>Study VPC peering, Transit Gateway, PrivateLink, and VPC Lattice<\/li>\n\n\n\n<li>Configure and troubleshoot multi-account and multi-region setups<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Learn how to scale and secure AWS network designs<\/p>\n\n\n\n<p><strong>Week 4: Automation and Infrastructure as Code<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Practice CloudFormation templates for setting up networks<\/li>\n\n\n\n<li>Use AWS CLI and SDKs (like Boto3) for automating tasks<\/li>\n\n\n\n<li>Explore network-related APIs and scripts for repeatability<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Automate network deployments and reduce manual effort<\/p>\n\n\n\n<p><strong>Week 5: Application Integration and Security<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Study integration of CloudFront, Elastic Load Balancing, App Mesh, and API Gateway<\/li>\n\n\n\n<li>Review Security Groups, NACLs, VPC Flow Logs, and encryption<\/li>\n\n\n\n<li>Explore security compliance standards like PCI, HIPAA, and SOC on AWS<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Learn how to connect services securely and meet compliance needs<\/p>\n\n\n\n<p><strong>Week 6: Monitoring, Troubleshooting, and Optimization<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Practice with CloudWatch, Reachability Analyzer, and VPC Flow Logs<\/li>\n\n\n\n<li>Use AWS Config, X-Ray, and CloudTrail for auditing and diagnostics<\/li>\n\n\n\n<li>Review performance tuning and latency optimization techniques<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Build confidence in identifying and resolving real-world issues<\/p>\n\n\n\n<p><strong>Week 7\u20138: Practice Exams and Final Review<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Take at least 2 full-length mock exams (e.g., from Tutorials Dojo or Whizlabs)<\/li>\n\n\n\n<li>Review missed questions and revisit weak topics<\/li>\n\n\n\n<li>Re-read key whitepapers and revisit sample questions<\/li>\n\n\n\n<li>Rest well and schedule your exam via Pearson VUE or PSI<\/li>\n<\/ul>\n\n\n\n<p><strong>Goal<\/strong>: Strengthen weak areas and simulate the test environment<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center has-white-color has-vivid-cyan-blue-background-color has-text-color has-background has-link-color wp-elements-81be47f613933e8b453bb480863ff3d5\">AWS Certified Advanced Networking Specialty <strong>Best Resources for Preparation<\/strong><\/h2>\n\n\n\n<p>To succeed in the AWS Certified Advanced Networking \u2013 Specialty exam, you need more than just theory. You must combine official documentation, real-world practice, and reliable mock tests to build both confidence and competence. Below are the most trusted and high-impact resources to include in your study plan.<\/p>\n\n\n\n<p><strong>1. Official AWS Exam Guide and Sample Questions<\/strong><\/p>\n\n\n\n<p>Begin your preparation by downloading the official exam guide and sample questions from the <a class=\"\" href=\"https:\/\/aws.amazon.com\/certification\/certified-advanced-networking-specialty\/\">AWS Certification site<\/a>. These resources give you a clear understanding of what domains are covered and the type of questions you may encounter.<\/p>\n\n\n\n<p><a href=\"https:\/\/aws.amazon.com\/whitepapers\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>2. AWS Whitepapers and Documentation<\/strong><\/a><\/p>\n\n\n\n<p>Key whitepapers include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><em>AWS Well-Architected Framework (Networking Lens)<\/em><\/li>\n\n\n\n<li><em>Hybrid Connectivity (Direct Connect + VPN)<\/em><\/li>\n\n\n\n<li><em>Security Best Practices for VPCs<\/em><\/li>\n\n\n\n<li><em>Transit Gateway &amp; PrivateLink docs<\/em><\/li>\n<\/ul>\n\n\n\n<p>Reading these builds a strong theoretical base for the real-world scenarios you will be tested on.<\/p>\n\n\n\n<p><strong>3. <a href=\"https:\/\/skillbuilder.aws\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Skill Builder<\/a><\/strong><\/p>\n\n\n\n<p>AWS\u2019s official learning platform offers self-paced Specialty-level courses and hands-on labs. Look for the Advanced Networking Learning Plan, which aligns closely with the exam domains.<\/p>\n\n\n\n<p><strong>4. <a href=\"https:\/\/aws.amazon.com\/free\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Free Tier or Sandbox Practice Account<\/a><\/strong><\/p>\n\n\n\n<p>Create a personal AWS Free Tier account to build your own VPCs, set up peering, deploy NAT Gateways, and simulate hybrid connections. Hands-on experience is absolutely essential for this exam.<\/p>\n\n\n\n<p><strong>5. Focused Video Courses (Optional)<\/strong><\/p>\n\n\n\n<p>You can optionally follow structured video courses that explain each domain with hands-on labs, visuals, and deep dives.<\/p>\n\n\n\n<p><strong>6. Practice Exams<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Choose high-quality, scenario-based <a href=\"https:\/\/www.skilr.com\/aws-certified-advanced-networking-specialty-free-practice-test\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>AWS Certified Advanced Networking &#8211; Specialty Exam<\/strong><\/a> <a href=\"https:\/\/www.skilr.com\/aws-certified-advanced-networking-specialty-free-practice-test\" target=\"_blank\" rel=\"noreferrer noopener\">practice questions<\/a> that mirror the actual exam style.<\/li>\n\n\n\n<li>Take practice tests multiple times and analyze incorrect answers in detail<\/li>\n<\/ul>\n\n\n\n<p><strong>7. Community Forums and Study Groups<\/strong><\/p>\n\n\n\n<p>Join active communities like:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>r\/AWSCertifications on Reddit<\/li>\n\n\n\n<li>AWS Discord Study Servers<\/li>\n\n\n\n<li>LinkedIn groups for AWS Specialty candidates<br>These groups help you stay motivated, discuss tricky concepts, and learn from others&#8217; exam experiences.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-center has-white-color has-vivid-cyan-blue-background-color has-text-color has-background has-link-color wp-elements-3193693238c8255635c3339424434b04\"><strong>AWS Certified Advanced Networking \u2013 Specialty Salary Guide (2025)<\/strong><\/h2>\n\n\n\n<p>Earning the AWS Certified Advanced Networking \u2013 Specialty certification can significantly enhance your earning potential. This credential is highly regarded in the cloud industry and is associated with some of the highest salaries among AWS certifications.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Global Salary Overview<\/strong><\/h4>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Region<\/strong><\/th><th><strong>Average Annual Salary (USD)<\/strong><\/th><\/tr><\/thead><tbody><tr><td>North America<\/td><td>$151,676<\/td><\/tr><tr><td>Europe<\/td><td>$137,698<\/td><\/tr><tr><td>Asia-Pacific<\/td><td>$138,000<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><em>Note: Salaries can vary based on experience, location, and company size.<\/em><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>India-Specific Salary Insights<\/strong><\/h4>\n\n\n\n<p>In India, professionals with the AWS Certified Advanced Networking \u2013 Specialty certification can expect competitive salaries, reflecting the growing demand for cloud networking expertise.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Experience Level<\/strong><\/th><th><strong>Average Annual Salary (INR)<\/strong><\/th><\/tr><\/thead><tbody><tr><td>Entry-Level (0\u20132 years)<\/td><td>\u20b94,00,000 \u2013 \u20b98,00,000<\/td><\/tr><tr><td>Mid-Level (3\u20136 years)<\/td><td>\u20b98,00,000 \u2013 \u20b915,00,000<\/td><\/tr><tr><td>Senior-Level (7+ years)<\/td><td>\u20b915,00,000 \u2013 \u20b925,00,000+<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><em>Note: These figures are approximate and can vary based on factors such as location, company, and individual skill sets.<\/em><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Factors Influencing Salary<\/strong><\/h4>\n\n\n\n<p>Several factors can impact the salary of AWS Certified Advanced Networking \u2013 Specialty professionals:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Experience<\/strong>: More years in the field typically lead to higher compensation.<\/li>\n\n\n\n<li><strong>Location<\/strong>: Salaries can vary significantly between regions and cities.<\/li>\n\n\n\n<li><strong>Company Size and Industry<\/strong>: Larger companies or those in high-demand industries may offer higher salaries.<\/li>\n\n\n\n<li><strong>Additional Certifications<\/strong>: Holding multiple AWS certifications can enhance your value to employers.<\/li>\n\n\n\n<li><strong>Specialized Skills<\/strong>: Expertise in areas like security, automation, and hybrid cloud networking can lead to higher pay.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center has-white-color has-vivid-cyan-blue-background-color has-text-color has-background has-link-color wp-elements-34fb6a8d2307f8f6d563adc36144f54b\"><strong>Career Path After Certification<\/strong><\/h3>\n\n\n\n<p>Passing the AWS Certified Advanced Networking \u2013 Specialty exam not only validates your deep expertise in cloud networking, it also opens doors to a wide range of senior-level roles. Whether you are currently a cloud engineer, system architect, or networking specialist, this certification sets the stage for high-impact career progression.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Common Career Progression After Certification<\/strong><\/h4>\n\n\n\n<p><strong>1. Cloud Network Engineer<\/strong><br>A natural next step for certified professionals, this role focuses on designing and managing scalable network infrastructure in the cloud. You will handle advanced VPC configurations, hybrid connections, and performance optimization.<\/p>\n\n\n\n<p><strong>2. Solutions Architect (with Networking Focus)<\/strong><br>Many professionals pivot into cloud architecture after gaining networking expertise. You will design secure, cost-efficient network architectures across multiple accounts or regions, often guiding both development and operations teams.<\/p>\n\n\n\n<p><strong>3. DevOps Engineer \u2013 Network Automation<\/strong><br>If you have skills in scripting and infrastructure as code, you may move into DevOps roles with a specialization in automating network provisioning, scaling, and monitoring using AWS tools.<\/p>\n\n\n\n<p><strong>4. Network Security Specialist<\/strong><br>This path is ideal if you are focused on compliance, threat protection, and secure access. Your job would involve implementing zero-trust architecture, encryption, and secure access to cloud resources.<\/p>\n\n\n\n<p><strong>5. Cloud Infrastructure Lead \/ Architect<\/strong><br>This senior-level position involves managing entire network infrastructures, advising organizations on best practices, and leading cloud migration strategies with complex networking components.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Relevant AWS Certifications to Continue With<\/strong><\/h4>\n\n\n\n<p>After completing this specialty certification, you may consider:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>AWS Certified Security \u2013 Specialty (for compliance and secure network design)<\/li>\n\n\n\n<li>AWS Certified DevOps Engineer \u2013 Professional (for automation-heavy roles)<\/li>\n\n\n\n<li>AWS Certified Solutions Architect \u2013 Professional (for overall system design)<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Freelance &amp; Consulting Opportunities<\/strong><\/h4>\n\n\n\n<p>Certified professionals also command high rates in freelance consulting roles, especially for enterprise clients needing secure hybrid or multi-region architectures. Platforms like Upwork, Freelancer, and Toptal feature strong demand for AWS network experts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Conclusion<\/strong><\/h3>\n\n\n\n<p>The AWS Certified Advanced Networking \u2013 Specialty exam is not just another certification\u2014it is a rigorous validation of your ability to design, implement, and manage complex networking solutions in the cloud. As organizations increasingly adopt hybrid architectures, scalable VPC designs, and secure connectivity, certified professionals are in high demand.<\/p>\n\n\n\n<p>Preparing for this exam requires more than memorizing facts. It demands hands-on practice, a deep understanding of AWS services, and a structured study plan that covers each domain in depth. By following the step-by-step plan, leveraging official AWS resources, and working through real-world scenarios, you will not only be ready for the exam\u2014you will also grow into a highly capable cloud networking professional.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/www.skilr.com\/aws-certified-advanced-networking-specialty-free-practice-test\" target=\"_blank\" rel=\" noreferrer noopener\"><img data-dominant-color=\"737e87\" data-has-transparency=\"false\" style=\"--dominant-color: #737e87;\" decoding=\"async\" sizes=\"(max-width: 960px) 100vw, 960px\" src=\"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-banner-.png\" alt=\"AWS Advanced Networking free test\" class=\"wp-image-3327 not-transparent\"\/><\/a><\/figure>\n<\/div>\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When cloud environments grow, so do the networking challenges. From managing multi-VPC architectures to securing hybrid connections and optimizing traffic flow across global regions, networking on AWS is no longer a side task, it&#8217;s mission-critical. The AWS Advanced Networking \u2013 Specialty certification is built for professionals who face these complexities daily and need a structured [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":3325,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[599,780],"tags":[938,926,932,927,931,929,933,928,930,935,941,939,940,943,942,936,934,937,944],"class_list":{"0":"post-3322","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-aws","8":"category-machine-learning","9":"tag-aws-advanced-networking","10":"tag-aws-advanced-networking-specialty","11":"tag-aws-advanced-networking-specialty-exam-questions","12":"tag-aws-advanced-networking-specialty-free-test","13":"tag-aws-advanced-networking-specialty-learning-resources","14":"tag-aws-advanced-networking-specialty-mock-tests","15":"tag-aws-advanced-networking-specialty-online-tutorials","16":"tag-aws-advanced-networking-specialty-practice-test","17":"tag-aws-advanced-networking-specialty-study-guide","18":"tag-aws-advanced-networking-specialty-2","19":"tag-aws-advanced-networking-specialty-braindumps","20":"tag-aws-advanced-networking-specialty-dumps","21":"tag-aws-advanced-networking-specialty-practice-exam","22":"tag-aws-advanced-networking-specialty-test","23":"tag-aws-certified-advanced-networking","24":"tag-aws-certified-advanced-networking-specialty-3","25":"tag-aws-certified-advanced-networking-specialty-2","26":"tag-aws-certified-advanced-networking-specialty-exam-dumps","27":"tag-aws-networking-specialty"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to prepare for the AWS Advanced Networking \u2013 Specialty ?<\/title>\n<meta name=\"description\" content=\"Get ready to pass the AWS Advanced Networking \u2013 Specialty exam with the latest and updated practice series and online course. Try Now!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to prepare for the AWS Advanced Networking \u2013 Specialty ?\" \/>\n<meta property=\"og:description\" content=\"Get ready to pass the AWS Advanced Networking \u2013 Specialty exam with the latest and updated practice series and online course. Try Now!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\" \/>\n<meta property=\"og:site_name\" content=\"Skilr Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-05T07:01:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-05T07:01:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.png\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Anandita Doda\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anandita Doda\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"27 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\"},\"author\":{\"name\":\"Anandita Doda\",\"@id\":\"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/218260d62d3339338ae5afdb5f5c449a\"},\"headline\":\"How to prepare for the AWS Advanced Networking \u2013 Specialty ?\",\"datePublished\":\"2025-06-05T07:01:44+00:00\",\"dateModified\":\"2025-06-05T07:01:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\"},\"wordCount\":5919,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp\",\"keywords\":[\"aws advanced networking\",\"AWS Advanced Networking \u2013 Specialty\",\"AWS Advanced Networking \u2013 Specialty exam questions\",\"AWS Advanced Networking \u2013 Specialty free test\",\"AWS Advanced Networking \u2013 Specialty learning resources\",\"AWS Advanced Networking \u2013 Specialty mock tests\",\"AWS Advanced Networking \u2013 Specialty online tutorials\",\"AWS Advanced Networking \u2013 Specialty practice test\",\"AWS Advanced Networking \u2013 Specialty study guide\",\"aws advanced networking specialty\",\"aws advanced networking specialty braindumps\",\"aws advanced networking specialty dumps\",\"aws advanced networking specialty practice exam\",\"aws advanced networking specialty test\",\"aws certified advanced networking\",\"aws certified advanced networking - specialty\",\"aws certified advanced networking specialty\",\"aws certified advanced networking specialty exam dumps\",\"aws networking specialty\"],\"articleSection\":[\"AWS\",\"Machine Learning\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\",\"url\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\",\"name\":\"How to prepare for the AWS Advanced Networking \u2013 Specialty ?\",\"isPartOf\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp\",\"datePublished\":\"2025-06-05T07:01:44+00:00\",\"dateModified\":\"2025-06-05T07:01:45+00:00\",\"author\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/218260d62d3339338ae5afdb5f5c449a\"},\"description\":\"Get ready to pass the AWS Advanced Networking \u2013 Specialty exam with the latest and updated practice series and online course. Try Now!\",\"breadcrumb\":{\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage\",\"url\":\"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp\",\"contentUrl\":\"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp\",\"width\":750,\"height\":400,\"caption\":\"How to prepare for the AWS Advanced Networking \u2013 Specialty\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.skilr.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to prepare for the AWS Advanced Networking \u2013 Specialty ?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.skilr.com\/blog\/#website\",\"url\":\"https:\/\/www.skilr.com\/blog\/\",\"name\":\"Skilr Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.skilr.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/218260d62d3339338ae5afdb5f5c449a\",\"name\":\"Anandita Doda\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/440295a704e9c104e3a16811183811618885ee5b19dae8f4007736a01fb12a68?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/440295a704e9c104e3a16811183811618885ee5b19dae8f4007736a01fb12a68?s=96&d=mm&r=g\",\"caption\":\"Anandita Doda\"},\"url\":\"https:\/\/www.skilr.com\/blog\/author\/anandita2001dodagmail-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to prepare for the AWS Advanced Networking \u2013 Specialty ?","description":"Get ready to pass the AWS Advanced Networking \u2013 Specialty exam with the latest and updated practice series and online course. Try Now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/","og_locale":"en_US","og_type":"article","og_title":"How to prepare for the AWS Advanced Networking \u2013 Specialty ?","og_description":"Get ready to pass the AWS Advanced Networking \u2013 Specialty exam with the latest and updated practice series and online course. Try Now!","og_url":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/","og_site_name":"Skilr Blog","article_published_time":"2025-06-05T07:01:44+00:00","article_modified_time":"2025-06-05T07:01:45+00:00","og_image":[{"width":750,"height":400,"url":"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.png","type":"image\/png"}],"author":"Anandita Doda","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anandita Doda","Est. reading time":"27 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#article","isPartOf":{"@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/"},"author":{"name":"Anandita Doda","@id":"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/218260d62d3339338ae5afdb5f5c449a"},"headline":"How to prepare for the AWS Advanced Networking \u2013 Specialty ?","datePublished":"2025-06-05T07:01:44+00:00","dateModified":"2025-06-05T07:01:45+00:00","mainEntityOfPage":{"@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/"},"wordCount":5919,"commentCount":0,"image":{"@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage"},"thumbnailUrl":"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp","keywords":["aws advanced networking","AWS Advanced Networking \u2013 Specialty","AWS Advanced Networking \u2013 Specialty exam questions","AWS Advanced Networking \u2013 Specialty free test","AWS Advanced Networking \u2013 Specialty learning resources","AWS Advanced Networking \u2013 Specialty mock tests","AWS Advanced Networking \u2013 Specialty online tutorials","AWS Advanced Networking \u2013 Specialty practice test","AWS Advanced Networking \u2013 Specialty study guide","aws advanced networking specialty","aws advanced networking specialty braindumps","aws advanced networking specialty dumps","aws advanced networking specialty practice exam","aws advanced networking specialty test","aws certified advanced networking","aws certified advanced networking - specialty","aws certified advanced networking specialty","aws certified advanced networking specialty exam dumps","aws networking specialty"],"articleSection":["AWS","Machine Learning"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/","url":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/","name":"How to prepare for the AWS Advanced Networking \u2013 Specialty ?","isPartOf":{"@id":"https:\/\/www.skilr.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage"},"image":{"@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage"},"thumbnailUrl":"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp","datePublished":"2025-06-05T07:01:44+00:00","dateModified":"2025-06-05T07:01:45+00:00","author":{"@id":"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/218260d62d3339338ae5afdb5f5c449a"},"description":"Get ready to pass the AWS Advanced Networking \u2013 Specialty exam with the latest and updated practice series and online course. Try Now!","breadcrumb":{"@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#primaryimage","url":"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp","contentUrl":"https:\/\/www.skilr.com\/blog\/wp-content\/uploads\/2025\/06\/How-to-prepare-for-the-AWS-Advanced-Networking-\u2013-Specialty-.webp","width":750,"height":400,"caption":"How to prepare for the AWS Advanced Networking \u2013 Specialty"},{"@type":"BreadcrumbList","@id":"https:\/\/www.skilr.com\/blog\/how-to-prepare-for-the-aws-advanced-networking-specialty\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.skilr.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to prepare for the AWS Advanced Networking \u2013 Specialty ?"}]},{"@type":"WebSite","@id":"https:\/\/www.skilr.com\/blog\/#website","url":"https:\/\/www.skilr.com\/blog\/","name":"Skilr Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.skilr.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/218260d62d3339338ae5afdb5f5c449a","name":"Anandita Doda","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.skilr.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/440295a704e9c104e3a16811183811618885ee5b19dae8f4007736a01fb12a68?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/440295a704e9c104e3a16811183811618885ee5b19dae8f4007736a01fb12a68?s=96&d=mm&r=g","caption":"Anandita Doda"},"url":"https:\/\/www.skilr.com\/blog\/author\/anandita2001dodagmail-com\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/posts\/3322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/comments?post=3322"}],"version-history":[{"count":7,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/posts\/3322\/revisions"}],"predecessor-version":[{"id":3334,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/posts\/3322\/revisions\/3334"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/media\/3325"}],"wp:attachment":[{"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/media?parent=3322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/categories?post=3322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skilr.com\/blog\/wp-json\/wp\/v2\/tags?post=3322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}