AWS Networking Specialty study materials
AWS Networking Specialty study resources

AWS Networking Specialty case studies

AWS Networking Specialty ยท Put your knowledge to work in context.

The AWS Certified Advanced Networking โ€“ Specialty credential is aimed at engineers who design, deploy, and operate complex network architectures on AWS rather than at generalist cloud practitioners. It suits network architects, senior cloud engineers, and consultants who already work daily with VPC design, hybrid connectivity, and routing at scale, and who need to prove depth beyond the associate-level certifications. The exam tests four broad areas: network design, network implementation, network management and operation, and network security, compliance, and governance. Expect questions that combine several services at once - for example, choosing between Transit Gateway, peering, and Direct Connect for a multi-account topology, or reasoning about how routing and security appliances interact in an inspection VPC. The AWS Networking Specialty case studies are 5 cases and about 3,777 words.

1

Transit Gateway Asymmetric Return Path with Dual Attachments

A company runs a Transit Gateway with two VPC attachments in the same Region. VPC-A hosts application subnets 10.10.0.0/24 and 10.10.1.0/24.

819 words, about 4 min
2

Hybrid DNS Resolution Failing for Overlapping Names

A company connects an on-premises data center to AWS with a Site-to-Site VPN and a Transit Gateway. On-premises uses Active Directory DNS at 172.16.5.10 and 172.16.5.11.

769 words, about 4 min
3

Direct Connect Failover That Never Triggers

A company has a 1 Gbps Direct Connect dedicated connection into a Direct Connect gateway, plus a Site-to-Site VPN as backup. The on-premises router advertises 10.0.0.0/8 over both the Direct Connect virtual interface (BGP) and the VPN.

747 words, about 4 min
4

Centralized Egress with Overlapping CIDRs Across Accounts

A company with 40 AWS accounts uses a shared-services VPC for centralized egress through a NAT gateway and a Network Firewall. Several business units have VPCs with overlapping CIDRs (10.20.0.0/16 appears in three accounts) because they were built independently.

707 words, about 4 min
5

Security Group Referencing Across a Peered VPC That Breaks on Scaling

A platform team runs a three-tier application across two VPCs connected by VPC peering. The web tier in VPC-A (10.0.0.0/16) must reach the app tier in VPC-B (10.1.0.0/16) only on port 8443.

735 words, about 4 min