What You'll Be Tested On
- Implement defense-in-depth with security groups, NACLs, and Network Firewall
- Configure encryption in transit using TLS, IPSec, and MACsec
- Implement DDoS protection with Shield and WAF
- Design network access controls using PrivateLink and endpoint policies
- Monitor and audit network security with Flow Logs and GuardDuty
Key AWS Services in This Domain
Exam Tips for Domain 4
Know the difference between stateful (SG) and stateless (NACL) filtering
Understand Network Firewall rule evaluation order
Practice designing WAF rules for common attack patterns
Practice Domain 4 Questions
Test your knowledge of Network Security & Compliance with practice questions from our ANS-C01 question bank.
Start Practice Quiz →