book

AWS Certified Advanced Networking Official Study Guide

by Sidhartha Chauhan, James Devine, Alan Halachmi, Matt Lehwess, Nick Matthews, Steve Morad, Steve Seymour

March 2018

Intermediate to advanced

576 pages

14h 59m

English

Sybex

Read now

Unlock full access

What Does this Book Cover?Interactive Online Learning Environment and Test BankExam ObjectivesObjective Map
AWS Global InfrastructureAmazon Virtual Private CloudAWS Networking ServicesSummaryResources to ReviewExam EssentialsExerciseReview Questions
Introduction to Amazon Virtual Private Cloud (Amazon VPC)SubnetsRoute TablesIP AddressingSecurity GroupsNetwork Access Control Lists (ACLs)Internet GatewaysNetwork Address Translation (NAT) Instances and NAT GatewaysEgress-Only Internet Gateways (EIGWs)Virtual Private Gateways (VGWs), Customer Gateways, and Virtual Private Networks (VPNs)VPC EndpointsVPC PeeringPlacement GroupsElastic Network InterfacesDynamic Host Configuration Protocol (DHCP) Option SetsAmazon Domain Name Service (DNS) ServerVPC Flow LogsSummaryResources to ReviewExam EssentialsExercisesReview Questions
VPC EndpointsVPC Endpoint OverviewGateway VPC EndpointsInterface VPC EndpointsTransitive RoutingIP Addressing FeaturesSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Virtual Private NetworksSite-to-Site VPNClient-to-Site VPNDesign PatternsSummaryResources to ReviewExercisesReview Questions

What Is AWS Direct Connect?Physical ConnectivityLogical ConnectivityResilient ConnectivityBillingSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Domain Name System and Load BalancingDomain Name SystemAmazon EC2 DNS ServiceAmazon Route 53Elastic Load BalancingSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Amazon CloudFrontContent Delivery Network OverviewThe AWS CDN: Amazon CloudFrontSummaryExam EssentialsResources to ReviewExercisesReview Questions
GovernanceData Flow SecurityAWS Security ServicesDetection and ResponseSummaryResources to ReviewExam EssentialsExercisesReview Questions
Network Performance BasicsAmazon Elastic Compute Cloud (Amazon EC2) Instance Networking FeaturesOptimizing PerformanceExample ApplicationsPerformance TestingSummaryResources to ReviewExam EssentialsExercisesReview Questions
Introduction to Network AutomationInfrastructure as CodeNetwork Monitoring ToolsSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Service RequirementsThe Elastic Network InterfaceAWS Cloud Services and Their Network RequirementsAmazon EMRAmazon Relational Database Service (Amazon RDS)AWS Database Migration Service (AWS DMS)Amazon RedshiftAWS GlueAWS Elastic BeanstalkSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Hybrid ArchitecturesApplication ArchitecturesAccess VPC Endpoints and Customer-Hosted Endpoints over AWS Direct ConnectUse of Transitive Routing in Hybrid ITSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Network TroubleshootingMethodology for TroubleshootingNetwork Troubleshooting ToolsTroubleshooting Common ScenariosSummaryExam EssentialsResources to ReviewExercisesReview Questions
Billing OverviewSummaryExam EssentialsResources to ReviewExercisesReview Questions
It All Begins with Threat ModelingOwnership Model and the Role of Network ManagementControlling Access to AWSEncryption OptionsNetwork Activity MonitoringMalicious Activity DetectionPenetration Testing and Vulnerability AssessmentSummaryExam EssentialsResources to ReviewExercisesReview Questions
Introduction to Scenarios and Reference ArchitecturesHybrid Networking ScenarioMulti-Location ResiliencySummaryResources to ReviewExam EssentialsExercisesReview Questions
Chapter 1: Introduction to Advanced NetworkingChapter 2: Amazon Virtual Private Cloud (Amazon VPC) and Networking FundamentalsChapter 3: Advanced Amazon Virtual Private Cloud (Amazon VPC)Chapter 4: Virtual Private NetworksChapter 5: AWS Direct ConnectChapter 6: Domain Name System and Load BalancingChapter 7: Amazon CloudFrontChapter 8: Network SecurityChapter 9: Network PerformanceChapter 10: AutomationChapter 11: Service RequirementsChapter 12: Hybrid ArchitecturesChapter 13: Network TroubleshootingChapter 14: BillingChapter 15: Risk and ComplianceChapter 16: Scenarios and Reference Architectures

Content preview from AWS Certified Advanced Networking Official Study Guide

Answers to Assessment Test

A. Only IPsec is a supported VPN protocol.
C. To vertically-scale, you need to change the instance type to a larger instance. Setting up a standby instance and moving the IP to this instance will result in the least amount of downtime. The downtime will be equal to the time required for the instance to re-create Internet Protocol Security (IPsec) tunnels and establish Border Gateway Protocol (BGP) neighbor relationships. This will be done automatically, or it will have to be initiated manually by you depending on the software on the Amazon EC2 instance. If you stop an existing instance and change its instance type, you also suffer the additional downtime required to boot an instance.
D. AWS Direct Connect ...