Prerequisites
- Strong networking fundamentals (TCP/IP, BGP, DNS, routing)
- Hands-on experience with AWS VPC, Direct Connect, or VPN
- 5–6 hours of study time per day
Study Schedule
Day 1VPC Design & Transit Gateway
- VPC CIDR planning, subnets, route tables, endpoints
- Transit Gateway route tables, attachments, isolation
- Multi-VPC patterns: peering, TGW, PrivateLink
- Practice: 40 Domain 1 questions
Day 2Direct Connect & VPN
- Dedicated vs hosted connections, VIF types
- Direct Connect Gateway, LAGs, redundancy patterns
- Site-to-Site VPN, accelerated VPN, BGP routing
- Practice: 40 Domain 2 questions
Day 3DNS & Content Delivery
- Route 53 routing policies, health checks, DNSSEC
- Hybrid DNS with Resolver endpoints and forwarding rules
- CloudFront, Global Accelerator, origin access
- Practice: 40 mixed questions
Day 4Network Security
- Security groups, NACLs, Network Firewall, GWLB
- WAF rules, Shield Advanced, DDoS mitigation
- Encryption: TLS, IPSec, MACsec, PrivateLink
- Practice: 40 Domain 4 questions
Day 5Network Operations & Troubleshooting
- VPC Flow Logs, Traffic Mirroring, Reachability Analyzer
- Troubleshooting: asymmetric routing, blackholes, MTU
- Centralized inspection architectures with TGW
- Practice: 40 Domain 3 questions
Day 6Performance & Advanced Topics
- Placement groups, ENA, EFA, jumbo frames
- IPv6 dual-stack, IPAM, bandwidth optimization
- Multi-region networking patterns
- Practice: 40 mixed questions
Day 7Full Mock Exam & Review
- Take a full 65-question mock exam (170 min)
- Review all incorrect answers and explanations
- Revisit weak domains and cheat sheets
- Focus on Direct Connect and Transit Gateway scenarios
Study Tips
Direct Connect and Transit Gateway dominate this exam — know them cold
Practice drawing network diagrams for complex hybrid scenarios
Know BGP route preferences and failover behavior
Ready to Practice?
Put your study plan into action with ANS-C01 practice questions.