AWS Certified Advanced Networking Study Guide : Specialty (ANS-C01) Exam / Todd Montgomery.

Format:

Book

Author/Creator:

Montgomery, Todd, author.

Language:

English

Subjects (All):

Electronic data processing personnel--Examinations--Study guides.

Electronic data processing personnel.

Electronic data processing personnel--Certification.

Computer technicians--Examinations--Study guides.

Computer technicians.

Computer technicians--Certification.

Amazon Web Services (Firm)--Examinations--Study guides.

Amazon Web Services (Firm).

Physical Description:

1 online resource (595 pages)

Edition:

Second edition.

Place of Publication:

Hoboken, New Jersey : John Wiley & Sons, Inc., [2024]

Summary:

The latest edition of the official study guide for the AWS Advanced Networking certification specialty exam The newly revised second edition of the AWS Certified Advanced Networking Study Guide: Specialty (ANS-C01) Exam delivers an expert review of Amazon Web Services Networking fundamentals as they relate to the ANS-C01 exam. You'll find detailed explanations of critical exam topics combined with real-world scenarios that will help you build the robust knowledge base you need for the test--and to succeed in the field as an AWS Certified Networking specialist. Learn about the design, implementation and deployment of AWS cloud-based Networking solutions, core services implementation, AWS service architecture design and maintenance (including architectural best practices), monitoring, Hybrid networks, security, compliance, governance, and network automation. The book also offers one year of free access to Sybex's online interactive learning environment and expert study tools, featuring flashcards, a glossary of useful terms, chapter tests, practice exams, and a test bank to help you keep track of your progress and measure your exam readiness. The coveted AWS Advanced Networking credential proves your skills with Amazon Web Services and hybrid IT network architectures at scale. It assesses your ability to apply deep technical knowledge to the design and implementation of AWS Networking services. This book provides you with comprehensive review and practice opportunities so you can succeed on the challenging ANS-C01 exam the first time around. It also offers: Coverage of all relevant exam domains and competencies Explanations of how to apply the AWS skills discussed within to the real world in the context of an AWS Certified Networking-related career Complimentary access to the practical Sybex online learning environment, complete with practice exams, flashcards, a glossary, and test bank AWS certification proves to potential employers that you have the knowledge and practical skills you need to deliver forward-looking, resilient, cloud-based solutions. The AWS Certified Advanced Networking Study Guide: Specialty (ANS-C01) Exam, 2nd Edition, is your ticket to the next big step in your career.

Contents:

Cover Page

Title Page

Copyright Page

Acknowledgments

About the Author

Contents at a Glance

Contents

Introduction

Interactive Online Learning Environment and Test Bank

AWS Certified Advanced Networking - Specialty (ANS-C01) Study Guide Exam Objectives

Objective Map

How to Contact the Publisher

Assessment Test

Answers to Assessment Test

Part I Network Design

Chapter 1 Edge Networking

Content Distribution Networking

CloudFront

CloudFront Implementation

Caching and Object Retention

Invalidations

Protocol Support

CloudFront Encryption Using SSL/TLS and SNI

CloudFront Security

Billing

Lambda@edge

Geo-restriction and Geolocation

Global Accelerator

Global Accelerator Architecture

Custom Routing Accelerator

AWS Global Accelerator Pricing

Elastic Load Balancers

Load Balancer Architectures

Listeners

Target Groups

Health Checking

Sticky Connections

Proxy Connections

Load Balancing Across Different Availability Zones

Connection Draining

AWS Load Balancer Offerings

Application Load Balancers

Gateway Load Balancers

Network Load Balancer

Classic Load Balancers

Configuring Elastic Load Balancers

API Gateway

REST API

HTTP API

WebSocket Protocol

API Gateway Configuration

API Gateway Caching

Endpoint Types

Security

Authentication and Authorization

CloudFront Design Considerations

Summary

Exam Essentials

Exercises

Written Lab

Written Lab 1.1: Create an HTTP API by Using the AWS Management Console

Review Questions

Chapter 2 Domain Name Services

DNS and Route 53

DNS Overview

Architecture

DNS Hierarchy

Zones

DNS Resolution Process

Resource Records

Timers

Delegations

DNSSEC Overview

DNS Logging and Monitoring

CloudTrail

CloudWatch.

Artificial Intelligence and Machine Learning

Redshift

Route 53 Advanced Features and Policies

Alias Records

Resolvers

Route 53 Resolver DNS Firewall

Health Checks

Traffic Routing Policies

Simple Routing

Multivalue Responses

Latency-Based Routing

Failover Routing

Round-Robin Routing

Weighted Routing

Geolocation

Geo-proximity

Route 53 Service Integrations

VPC

Load Balancers

Route 53 Application Recovery Controller

Hybrid Route 53

Multi-account Route 53

Multi-Region Route 53

Using Route 53 Public Hosted Zones

Using Route 53 Private Hosted Zones

Using Route 53 Resolver Endpoints in Hybrid and AWS Architectures

Using Route 53 for Global Traffic Management

Route 53 Failover

Domain Registration

Required Information to Register a Domain

Privacy Protection

Route 53 Registration Information

Renewing Your Domain

Chapter 3 Hybrid and Multi-account DNS

Implementing Hybrid and Multi-account DNS Architectures

Route 53 Hosted Zones

Private Hosted Zones

Public Hosted Zones

Traffic Management

Latency

Weighted

Failover

Multivalue

Domain Delegation and Forwarding

Delegating Domains

Forwarding Rules

Configuring Records in Route 53

A Record

AAAA Record

CNAME

MX Record

SOA Record

TXT Record

PTR Record

Alias Record

SRV Record

SPF Record

NAPTR Record

CAA Record

Configuring DNSSEC

DNS Endpoints

Outbound Endpoints

Inbound Endpoints

Configuring Route 53 Monitoring and Logging

CloudTrail API Logging

CloudWatch Logging

DNS Query Logging

Resolver Query Logging

Hosted Zone Monitoring

Resolver Endpoints Monitoring.

Domain Registration Monitoring

Written Labs

Written Lab 3.1: Configure Logging for DNS Queries

Written Lab 3.2: View DNS Query Metrics for a Public Hosted Zone in the CloudWatch Console

Chapter 4 Load Balancing

Elastic Load Balancing

Network Load Balancing

Application Load Balancing

Gateway Load Balancing

Classic Load Balancing

Network Design

High Availability

ELB Connectivity Patterns

Internal Load Balancers

External Load Balancers

Autoscaling

AWS Service Integrations

Config

Traffic Mirroring

VPC Endpoint Services (PrivateLink)

Web Application Firewall

Route 53

Amazon Elastic Kubernetes Service

AWS Certificate Manager

ELB Configuration Options

Proxy Protocol

X-Forwarded-For Protocol

Cross-Zone Load Balancing

Session Affinity and Sticky Sessions

Routing

Target Types

IP Address Type

Protocol Version

Registered Targets

Routing Algorithms

Deregistration and Connection Draining

Deletion Protection

Slow Start

The GENEVE Protocol

Encryption and Authentication

SSL/TLS Offload

TLS Passthrough

Written Lab 4.1: Create a Network Load Balancer

Written Lab 4.2: Use the Console to Enable Deletion Protection

Written Lab 4.3: Use the Console to Disable Deletion Protection

Written Lab 4.4: Enable Application-Based Stickiness

Chapter 5 Logging and Monitoring

CloudWatch

Metrics

Monitoring Categories

Agents

Logging

Alarms

Metric Insights

Dashboards

Transit Gateway Network Manager

VPC Reachability Analyzer

Access Logs

Route 53 Logs

CloudFront Logs.

CloudTrail Logs

X-Ray

X-Ray Traces

X-Ray Insights

Flow Logs

Baseline Network Performance

Inspector

Application Insights

Written Lab 5.1: Enable CloudWatch Detailed Monitoring for an Instance That Has Already Been Enabled

Written Lab 5.2: Enable CloudWatch Logging from the Web Console

Written Lab 5.3: Enable CloudWatch Alarms from the Web Console

Written Lab 5.4: Create a VPC Reachability Analyzer from the Web Console

Part II Network Implementation

Chapter 6 Hybrid Networking

Hybrid Connectivity

OSI Layer 1

Optics

OSI Layer 2

VLANs

Link Aggregation

Jumbo Frames

Encapsulation and Encryption

Overlay and Underlay Networks

VxLan

Generic Routing Encapsulation

IPSec

GENEVE

Routing Fundamentals

Static Routing

Dynamic Routing

The BGP Routing Protocol

Direct Connect

Direct Connect Gateway

Virtual Private Gateway

Site-to-Site VPN

VPN CloudHub

AWS Account Resource Sharing

Written Lab 6.1: Simulate Creating a Direct Connection

Written Lab 6.2: Simulate Creating a Site-to-Site VPN Connection

Chapter 7 Connecting On-Premises Networks

On-Premises Network Connectivity

VPNs

VPN Security

Accelerated Site-to-Site VPN Connections

Layer 1 and Types of Hardware to Use

Direct Connect Locations

Letter of Authorization Documents

Layer 2 and Layer 3

Switching

Gateways

Software-Defined Networking

Transit Gateway

PrivateLink

Resource Access Manager

Testing and Validating Connectivity Between Environments

Route Analyzer

Reachability Analyzer

ICMP ping

traceroute

Written Labs.

Written Lab 7.1: Create a VPN Attachment on a Transit Gateway Using the Console

Written Lab 7.2: Perform a traceroute

Written Lab 7.3: Use ping

Chapter 8 Inter-VPC and Multi-account Networking

Networking Services of VPCs

VPC Sharing

VPC Peering

Multi-account VPC Sharing

Hub-and-Spoke VPC Architectures

Transit Gateway Connect

transit VPCs

Wide-Area Networking

Software-Defined Wide Area Networking

Multi Protocol Label Switching

Expanding AWS Networking Connectivity

Organizations

Security Association Markup Language

Active Directory

Chapter 9 Hybrid Network Routing and Connectivity

Industry-Standard Routing Protocols Used in AWS Hybrid Networks

Optimizing Routing

Optimizing Dynamic Routing

Optimizing Static Routing

Route Priorities and Administrative Distance

Route Summarization

Route Propagation

Overlapping Routes

BGP Over Direct Connect

Connectivity Methods for AWS and Hybrid Networks

Direct Connect and Direct Connect Gateway

Direct Connect Virtual Interfaces

App Mesh

AWS Networking Limits and Quotas

Available Private and Public Access Methods for Custom Services

Available Inter-Regional and Intra-Regional Communication Patterns

Written Lab 9.1: Enable Route Propagation in a VPC

Part III Network Management and Operations

Chapter 10 Network Automation

Network Automation

Infrastructure as Code

AWS Cloud Development Kit

AWS CloudFormation

EventBridge

AWS Command-Line Interface

AWS Software Development Kit.

Application Programming Interfaces.

Notes:

Description based on print version record.

Includes index.

ISBN:

9781394171866

1394171862

OCLC:

1401059262