| VPC Fundamentals | Default vs. Custom VPC | Create VPCs, configure CIDR blocks |
| Subnets | Public vs. Private Subnets | Launch EC2 instances in each subnet type |
| Routing | Route Tables, Route Propagation | Define custom routes, inspect routing behavior |
| Gateways | Internet Gateway, NAT Gateway | Attach IGWs, configure NAT Gateways for subnets |
| Elastic IPs | Allocation, Association | Allocate EIPs, remap addresses |
| Security Controls | Security Groups (stateful), Network ACLs (stateless) | Compare SG vs. NACL rules in action |
| VPC Peering | Peering Architectures | Establish peering, test cross-VPC connectivity |
