ANS-C01 Cheat Sheet

#	Domain	Weight	Questions	Practice
1.0	Network Design	30%	674	Practice →
2.0	Network Implementation	26%	584	Practice →
Total	56%	2,264

Domain

Weight

Questions

Practice

1.0

Network Design

30%

674

Practice →

2.0

Network Implementation

26%

584

Practice →

Total

56%

2,264

Domain Quick Reference

1.0Network Design

Candidates must design VPC topologies, Transit Gateway route tables, Direct Connect/VPN hybrid links, and segmentation using PrivateLink, VPC peering, and prefix lists. The critical skill is preventing overlapping CIDRs and asymmetric routing via correct route table associations.

30%

Key concepts

✓Designing VPC CIDR allocation, subnets, and peering versus Transit Gateway topologies
✓Choosing Direct Connect, Site-to-Site VPN, or SD-WAN for hybrid connectivity and failover
✓Applying route table design, BGP attributes, and longest-prefix match for traffic steering
✓Segmenting networks with security groups, NACLs, PrivateLink, and centralized inspection VPCs

Watch out for

⚠Assuming Transit Gateway automatically routes between attached VPCs without explicit route table associations and propagations
⚠Forgetting that VPC peering is non-transitive, so spoke-to-spoke traffic needs a Transit Gateway or extra peering
⚠Overlooking overlapping CIDRs between on-premises and VPCs, which breaks hybrid routing unless NAT or secondary CIDRs are used

2.0Network Implementation

You must design and configure VPC route tables, Transit Gateway attachments, Direct Connect virtual interfaces, and Site-to-Site VPN tunnels so traffic routes correctly. The critical thing: verify route propagation and longest-prefix-match behavior end to end.

26%

Key concepts

✓Designing VPC route tables, subnet associations, and internet/NAT gateway egress paths
✓Configuring AWS Site-to-Site VPN tunnels, BGP ASNs, and static versus dynamic routing
✓Deploying Transit Gateway attachments, route table segmentation, and inter-VPC peering topologies
✓Setting up Direct Connect virtual interfaces, LAGs, and MACsec or dedicated versus hosted connections

Watch out for

⚠Forgetting that a subnet route table must explicitly point to a NAT gateway or instance for private subnet egress
⚠Assuming Transit Gateway route tables propagate automatically instead of requiring explicit association and propagation
⚠Confusing Direct Connect virtual interface types (private, public, transit) and which gateway each one attaches to

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For ANS-C01, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

#	Domain	Weight	Questions	Practice
1.0	Network Design	30%	674	Practice →
2.0	Network Implementation	26%	584	Practice →
Total	56%	2,264

Domain

Weight

Questions

Practice

1.0

Network Design

30%

674

Practice →

2.0

Network Implementation

26%

584

Practice →

Total

56%

2,264

Domain Quick Reference

1.0Network Design

30%

Key concepts

✓Designing VPC CIDR allocation, subnets, and peering versus Transit Gateway topologies
✓Choosing Direct Connect, Site-to-Site VPN, or SD-WAN for hybrid connectivity and failover
✓Applying route table design, BGP attributes, and longest-prefix match for traffic steering
✓Segmenting networks with security groups, NACLs, PrivateLink, and centralized inspection VPCs

Watch out for

⚠Assuming Transit Gateway automatically routes between attached VPCs without explicit route table associations and propagations
⚠Forgetting that VPC peering is non-transitive, so spoke-to-spoke traffic needs a Transit Gateway or extra peering
⚠Overlooking overlapping CIDRs between on-premises and VPCs, which breaks hybrid routing unless NAT or secondary CIDRs are used

2.0Network Implementation

26%

Key concepts

✓Designing VPC route tables, subnet associations, and internet/NAT gateway egress paths
✓Configuring AWS Site-to-Site VPN tunnels, BGP ASNs, and static versus dynamic routing
✓Deploying Transit Gateway attachments, route table segmentation, and inter-VPC peering topologies
✓Setting up Direct Connect virtual interfaces, LAGs, and MACsec or dedicated versus hosted connections

Watch out for

⚠Forgetting that a subnet route table must explicitly point to a NAT gateway or instance for private subnet egress
⚠Assuming Transit Gateway route tables propagate automatically instead of requiring explicit association and propagation
⚠Confusing Direct Connect virtual interface types (private, public, transit) and which gateway each one attaches to

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For ANS-C01, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

ANS-C01 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Network Design

2.0Network Implementation

Exam Day Reminders

More ANS-C01 resources

ANS-C01 Cheat Sheet

ANS-C01 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Network Design

2.0Network Implementation

Exam Day Reminders

More ANS-C01 resources