AWS Certified Advanced Networking - Specialty Exam
65-question written exam with multiple-choice and multiple-response question types.
- Type
- Written
- Delivery
- Both
- Duration
- 170 min
- Questions
- 65
Passing score: 700 Scaled score on a 100 to 1,000 scale
Exam sections
Domain 1: Network Design
Design global architectures using edge services like CloudFront and Global Accelerator. Create DNS solutions with Route 53 for public, private, and hybrid requirements. Integrate load balancing for high availability and security. Develop routing strategies for hybrid connectivity and multi-account VPC structures.
Question notes
Multiple choice, multiple response, and matching questions. Covers design patterns and integration of global networking services.
Preparation tips
Focus on global traffic management and DNS hybrid integration patterns using Route 53 and Global Accelerator.
Domain 2: Network Implementation
Implement hybrid connectivity between on-premises and AWS using Direct Connect and VPNs. Set up complex multi-account and multi-region routing architectures. Configure advanced DNS solutions and automate network infrastructure using Infrastructure as Code tools like CloudFormation and CDK.
Question notes
Includes tasks on configuring physical network requirements and building hub-and-spoke architectures.
Preparation tips
Practice configuring Direct Connect gateways, Transit Gateway Connect, and infrastructure automation using AWS CDK.
Domain 3: Network Management and Operation
Maintain and optimize AWS and hybrid networks. Monitor network traffic using tools like CloudWatch and VPC Flow Logs to troubleshoot connectivity. Implement strategies to enhance performance, reliability, and cost-effectiveness through subnet optimization and jumbo frame support.
Question notes
Focuses on monitoring, analyzing traffic, and optimizing for performance and cost.
Preparation tips
Master monitoring tools like Reachability Analyzer, Transit Gateway Network Manager, and VPC Traffic Mirroring.
Domain 4: Network Security, Compliance, and Governance
Implement security features to meet compliance needs, such as AWS WAF and Shield. Validate and audit network security using monitoring and logging services. Maintain data confidentiality through encryption methods like IPsec and TLS, and manage certificates using AWS Private CA.
Question notes
Covers network encryption, threat modeling, and auditing security configurations.
Preparation tips
Understand encryption options for data in transit and auditing strategies using Firewall Manager and VPC Flow Logs.
