Validate your ability to design, implement, manage, and secure AWS and hybrid network architectures at scale. This exam covers network design, implementation, management, operations, and network security, compliance, and governance.
Get instant feedback after each question. See explanations and track your progress as you learn.
Timed session with no feedback until the end. Experience real exam conditions and test your knowledge.
10 questions · pick a topic · 5 minutes · shareable
Every in-scope networking service, hybrid connectivity pattern, and routing decision the ANS-C01 exam actually tests — organised by the four exam domains with reference architectures and troubleshooting playbooks
The AWS Certified Advanced Networking - Specialty (ANS-C01) validates deep expertise in designing, implementing, managing, and securing AWS and hybrid network architectures at scale. It covers VPC design, Direct Connect, Transit Gateway, Route 53, load balancing, VPN, BGP routing, and network security services like Network Firewall, WAF, and Shield.
This exam is for network engineers and architects with 5+ years of networking experience, including 2+ years working with AWS and hybrid cloud networks. You should be comfortable with BGP, IPsec, DNS, VLAN configuration, Direct Connect setup, Transit Gateway design, and AWS security constructs. It's the hardest AWS certification for anyone without deep networking experience.
The ANS-C01 exam has 65 questions (50 scored, 15 unscored) in multiple-choice and multiple-response format. You have 170 minutes and need a scaled score of 750 out of 1000 (approximately 75%) to pass. The exam is available at Pearson VUE and online. The cost is $300 USD.
Recommended experience: 5+ years of networking experience with 2+ years of cloud and hybrid networking. Deep understanding of BGP, DNS, IPsec, VLANs, and AWS networking services.
The ANS-C01 is widely considered one of the hardest AWS certifications. It requires deep understanding of networking protocols (BGP, IPsec, DNS), Direct Connect physical setup, Transit Gateway complex routing, and hybrid architectures. Many candidates report it as harder than the Solutions Architect Professional. Plan for 6-8 weeks of study with hands-on lab practice.
Amazon VPC (peering, endpoints, Flow Logs), AWS Transit Gateway (route tables, Connect, multicast), AWS Direct Connect (VIFs, LAG, gateway), Route 53 (Resolver, DNSSEC, routing policies), Elastic Load Balancing (ALB/NLB/GWLB), AWS Network Firewall, Site-to-Site VPN, and AWS Global Accelerator. Understanding BGP attributes (AS-PATH, MED, local preference) is essential for the hybrid networking questions.
AWS recommends the Solutions Architect Associate or Professional as a prerequisite. The networking exam assumes strong understanding of VPC, IAM, and general AWS architecture. If you have 5+ years of networking experience and 2+ years on AWS, you can attempt it directly — but review the Solutions Architect material for any gaps in foundational AWS knowledge.
Studying for more than one certification? All our practice tests are free.
We use cookies to improve your experience. This site uses YouTube embeds and Google Analytics to understand how visitors use our site. Learn more