6. Networking and Content Delivery (18%)

Networking is the infrastructure beneath everything else. No matter how well your application is architected, if packets can't reach it — or leave it — nothing works. At 18%, this domain is the second-largest by weight and tests you across a wide range: VPC fundamentals, security controls, private connectivity, hybrid networking, DNS, and content delivery. The exam favors troubleshooting scenarios — "traffic isn't reaching the instances" or "users in Europe report slow response times" — so you need to know not just what services exist but how to diagnose when they fail.

Three task areas: implementing networking features and connectivity (Task 5.1 — VPC, security groups, NACLs, VPN, WAF), configuring domain, DNS, and content delivery (Task 5.2 — Route 53, CloudFront, Global Accelerator), and troubleshooting network connectivity (Task 5.3 — flow logs, Reachability Analyzer, hybrid connectivity issues). Expect 9 questions.