ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam
Go to Exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 21 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01
Question #: 21
Topic #: 1
[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company’s network engineer needs to design a new solution to help troubleshoot and detect network anomalies. The network engineer has configured Traffic Mirroring. However, the mirrored traffic is overwhelming the Amazon EC2 instance that is the traffic mirror target. The EC2 instance hosts tools that the company’s security team uses to analyze the traffic. The network engineer needs to design a highly available solution that can scale to meet the demand of the mirrored traffic.
Which solution will meet these requirements?

  • A. Deploy a Network Load Balancer (NLB) as the traffic mirror target. Behind the NLB. deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring as necessary.
  • B. Deploy an Application Load Balancer (ALB) as the traffic mirror target. Behind the ALB, deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring only during non-business hours.
  • C. Deploy a Gateway Load Balancer (GLB) as the traffic mirror target. Behind the GLB. deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring as necessary.
  • D. Deploy an Application Load Balancer (ALB) with an HTTPS listener as the traffic mirror target. Behind the ALB. deploy a fleet of EC2 instances in an Auto Scaling group. Use Traffic Mirroring only during active events or business hours.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by zaazanuna at March 18, 2023, 9:43 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Cheam
Highly Voted 1 year, 10 months ago
Selected Answer: A
Another tricky question and consider the wording in the answers choices - "as the traffic mirror target". I have selected A because the NLB is a valid mirror target, but the GWLB is not (Answer C). Yes, comments supporting Answer C say that GWLB must also mean/include GLWB-E. Then you have two valid answers to the question where you can only select one. Therefore, it is A for me. Ref: https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html All the best.
upvoted 19 times
...
dremm
Highly Voted 2 years, 1 month ago
Selected Answer: C
C) Makes more sense for the updated exam, GWLB is relatively new. Read the release post for GWLB - https://aws.amazon.com/about-aws/whats-new/2022/05/amazon-vps-traffic-mirroring-supports-sending-mirrored-traffic-gateway-load-balancer-backed-monitoring-appliances/ "This helps simplify the monitoring of network traffic across AWS accounts and VPCs in a highly scalable and operationally efficient manner by removing routing complexity and operational overhead."
upvoted 16 times
...
matanasov
Most Recent 1 month ago
Selected Answer: C
GWLB supports traffic mirroring natively as a target NLB cannot be used as a traffic mirroring target
upvoted 1 times
...
Wardove
1 month, 1 week ago
Selected Answer: C
NLB supports mirroring, but not ideal for raw packet processing — lacks L3/L4 transparency.. so even though C does not mention GWLBE, my bet would be on it anyway
upvoted 1 times
...
RavikantKumarRavi
2 months ago
Selected Answer: A
NLB incase of EC2 and GLB incase of security appliance as destination or target
upvoted 1 times
...
jyrajan69
4 months, 1 week ago
Selected Answer: C
It depends on when you answered this question because based on the latest the answer is C https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-how-it-works.html
upvoted 1 times
...
AzureDP900
4 months, 3 weeks ago
Selected Answer: A
A is right To create a highly available solution that can scale to handle mirrored traffic while minimizing the impact on the EC2 instance hosting tools for analyzing traffic, we should use a load balancer to distribute the mirrored traffic across multiple instances.
upvoted 1 times
...
Spaurito
6 months, 2 weeks ago
C - A listener for Gateway Load Balancers listens for all IP packets across all ports, and then forwards traffic to the target group.
upvoted 1 times
...
btech24
8 months, 2 weeks ago
Answer is A, Gateway Load Balancer is not a valid traffic mirror target. There are 3 valid traffic mirror endpoints 1. Network Interface 2. Network Load Balancer 3. Gateway Load Balancer endpoints ref https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html
upvoted 3 times
...
AlirezaNetWorld
8 months, 3 weeks ago
The right answer is C without any doubts...
upvoted 1 times
...
kourosh
1 year ago
Selected Answer: A
A is the correct answer: https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html
upvoted 1 times
...
Jonalb
1 year, 1 month ago
Selected Answer: A
A is correct!
upvoted 1 times
...
Raphaello
1 year, 1 month ago
Selected Answer: A
I'd go with A. Valid traffic mirror targets include "GWLB ENDPOINTS"..for this, I'd go with A. Traffic mirror target concepts A traffic mirror target is the destination for mirrored traffic. You can use the following resources as traffic mirror targets: Network interfaces of type interface Network Load Balancers Gateway Load Balancer endpoints <<<< https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html
upvoted 1 times
...
patanjali
1 year, 2 months ago
Selected Answer: A
GWLB cant be the answer as you will need Firewall behind GWLB which understand GENEVE. Simple and BEst solution is to use NLB with TCP/UDP listner
upvoted 1 times
...
ogrefighter
1 year, 2 months ago
Selected Answer: A
GLB operates at Layer 3. NLB operates at Layer 4 -- so an NLB cannot be directly the target of GLB. Simplest answer is A https://aws.amazon.com/compare/the-difference-between-the-difference-between-application-network-and-gateway-load-balancing/#:~:text=An%20NLB%20operates%20on%20layer,on%20ports%20and%20IP%20addresses.
upvoted 1 times
...
Marfee400704
1 year, 3 months ago
I think that its correct answer is A according to SPOTO products.
upvoted 1 times
...
marfee
1 year, 3 months ago
I think that it's correcty answer is A.
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel