Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 21 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01

Question #: 21
Topic #: 1

[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company’s network engineer needs to design a new solution to help troubleshoot and detect network anomalies. The network engineer has configured Traffic Mirroring. However, the mirrored traffic is overwhelming the Amazon EC2 instance that is the traffic mirror target. The EC2 instance hosts tools that the company’s security team uses to analyze the traffic. The network engineer needs to design a highly available solution that can scale to meet the demand of the mirrored traffic.
Which solution will meet these requirements?

A. Deploy a Network Load Balancer (NLB) as the traffic mirror target. Behind the NLB. deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring as necessary.
B. Deploy an Application Load Balancer (ALB) as the traffic mirror target. Behind the ALB, deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring only during non-business hours.
C. Deploy a Gateway Load Balancer (GLB) as the traffic mirror target. Behind the GLB. deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring as necessary.
D. Deploy an Application Load Balancer (ALB) with an HTTPS listener as the traffic mirror target. Behind the ALB. deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring only during active events or business hours.

Show Suggested Answer

Suggested Answer: A 🗳️

by zaazanuna at March 18, 2023, 9:43 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Cheam

Highly Voted 2 years ago

Selected Answer: A

Another tricky question and consider the wording in the answers choices - "as the traffic mirror target". I have selected A because the NLB is a valid mirror target, but the GWLB is not (Answer C). Yes, comments supporting Answer C say that GWLB must also mean/include GLWB-E. Then you have two valid answers to the question where you can only select one. Therefore, it is A for me. Ref: https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html All the best.

upvoted 20 times

...

dremm

Highly Voted 2 years, 4 months ago

Selected Answer: C

C) Makes more sense for the updated exam, GWLB is relatively new. Read the release post for GWLB - https://aws.amazon.com/about-aws/whats-new/2022/05/amazon-vps-traffic-mirroring-supports-sending-mirrored-traffic-gateway-load-balancer-backed-monitoring-appliances/ "This helps simplify the monitoring of network traffic across AWS accounts and VPCs in a highly scalable and operationally efficient manner by removing routing complexity and operational overhead."

upvoted 17 times

...

6008af2

Most Recent 1 week, 5 days ago

Selected Answer: C

Gateway Load Balancer is the only supported AWS load balancer that can be a traffic mirror target (see AWS docs). This setup gives: High availability (via Auto Scaling group). Scale-out capability. Correct AWS service for mirrored traffic distribution.

upvoted 1 times

...

dcantos

2 months ago

Selected Answer: C

Is C....

upvoted 1 times

...

matanasov

4 months ago

Selected Answer: C

GWLB supports traffic mirroring natively as a target NLB cannot be used as a traffic mirroring target

upvoted 1 times

...

Wardove

4 months, 1 week ago

Selected Answer: C

NLB supports mirroring, but not ideal for raw packet processing — lacks L3/L4 transparency.. so even though C does not mention GWLBE, my bet would be on it anyway

upvoted 1 times

...

RavikantKumarRavi

5 months ago

Selected Answer: A

NLB incase of EC2 and GLB incase of security appliance as destination or target

upvoted 2 times

...

jyrajan69

7 months, 1 week ago

Selected Answer: C

It depends on when you answered this question because based on the latest the answer is C https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-how-it-works.html

upvoted 2 times

...

AzureDP900

7 months, 3 weeks ago

Selected Answer: A

A is right To create a highly available solution that can scale to handle mirrored traffic while minimizing the impact on the EC2 instance hosting tools for analyzing traffic, we should use a load balancer to distribute the mirrored traffic across multiple instances.

upvoted 1 times

...

Spaurito

9 months, 2 weeks ago

C - A listener for Gateway Load Balancers listens for all IP packets across all ports, and then forwards traffic to the target group.

upvoted 1 times

...

btech24

11 months, 2 weeks ago

Answer is A, Gateway Load Balancer is not a valid traffic mirror target. There are 3 valid traffic mirror endpoints 1. Network Interface 2. Network Load Balancer 3. Gateway Load Balancer endpoints ref https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html

upvoted 3 times

...

AlirezaNetWorld

11 months, 3 weeks ago

The right answer is C without any doubts...

upvoted 1 times

...

kourosh

1 year, 3 months ago

Selected Answer: A

A is the correct answer: https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html

upvoted 1 times

...

Jonalb

1 year, 4 months ago

Selected Answer: A

A is correct!

upvoted 1 times

...

Raphaello

1 year, 4 months ago

Selected Answer: A

I'd go with A. Valid traffic mirror targets include "GWLB ENDPOINTS"..for this, I'd go with A. Traffic mirror target concepts A traffic mirror target is the destination for mirrored traffic. You can use the following resources as traffic mirror targets: Network interfaces of type interface Network Load Balancers Gateway Load Balancer endpoints <<<< https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html

upvoted 1 times

...

patanjali

1 year, 5 months ago

Selected Answer: A

GWLB cant be the answer as you will need Firewall behind GWLB which understand GENEVE. Simple and BEst solution is to use NLB with TCP/UDP listner

upvoted 1 times

...

ogrefighter

1 year, 5 months ago

Selected Answer: A

GLB operates at Layer 3. NLB operates at Layer 4 -- so an NLB cannot be directly the target of GLB. Simplest answer is A https://aws.amazon.com/compare/the-difference-between-the-difference-between-application-network-and-gateway-load-balancing/#:~:text=An%20NLB%20operates%20on%20layer,on%20ports%20and%20IP%20addresses.

upvoted 1 times

...

Load full discussion...