ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam
Go to Exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 74 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01
Question #: 74
Topic #: 1
[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company has deployed a new web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Enterprise customers from around the world will use the application. Employees of these enterprise customers will connect to the application over HTTPS from office locations.

The company must configure firewalls to allow outbound traffic to only approved IP addresses. The employees of the enterprise customers must be able to access the application with the least amount of latency.

Which change should a network engineer make in the infrastructure to meet these requirements?

  • A. Create a new Network Load Balancer (NLB). Add the ALB as a target of the NLB.
  • B. Create a new Amazon CloudFront distribution. Set the ALB as the distribution’s origin.
  • C. Create a new accelerator in AWS Global Accelerator. Add the ALB as an accelerator endpoint.
  • D. Create a new Amazon Route 53 hosted zone. Create a new record to route traffic to the ALB.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by SAPALL at April 20, 2023, 4:35 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
printfmarcelo
Highly Voted 2 years, 1 month ago
Selected Answer: C
C, global accelerator Global static IP - Simplify allowlisting in enterprise firewalling and IoT use cases https://aws.amazon.com/global-accelerator/
upvoted 8 times
...
study_aws1
Highly Voted 2 years, 1 month ago
Statement to be noted - "The company must configure firewalls to allow outbound traffic to only approved IP addresses. The employees of the enterprise customers must be able to access the application with the least amount of latency." While Cloudfront can provide low latency, given that the traffic will be routed to specified IPs, the scenario in this question leads to Global Accelerator - C)
upvoted 7 times
...
woorkim
Most Recent 7 months, 1 week ago
C is right! C. Global Accelerator + ALB Provides 2 static anycast IP addresses Optimizes network path using AWS global network Perfect for dynamic content Reduces latency through edge networking Makes firewall rules simple (only 2 IPs to whitelist) ✅ Best solution
upvoted 1 times
...
Raphaello
1 year, 2 months ago
Selected Answer: C
C is the correct answer. AGA provides 2 static IP's, and an entry point to route the flow through AWS backbone network, thus least lantency.
upvoted 1 times
...
marfee
1 year, 4 months ago
I'm from Japan.As the result of my investigate, I guess that it's answer C.
upvoted 1 times
...
[Removed]
1 year, 11 months ago
Selected Answer: B
CloudFront has edge locations around the world that can cache content closer to your users
upvoted 2 times
...
Josh1217
1 year, 11 months ago
Selected Answer: C
Global Accelerator best for accessing application, CloudFront best for delivering content to customers.
upvoted 7 times
...
ITgeek
2 years, 1 month ago
Selected Answer: C
C, global accelerator
upvoted 5 times
...
PTLS
2 years, 1 month ago
AWS Global Accelerator: Global traffic manager Use traffic dials to route traffic to the nearest Region or achieve fast failover across Regions. API acceleration Accelerate API workloads by up to 60%, leveraging TCP termination at the edge. Global static IP Simplify allowlisting in enterprise firewalling and IoT use cases. Low-latency gaming and media workloads Use custom routing to deterministically route traffic to a fleet of EC2 instances. Answer is C
upvoted 3 times
...
Spike2020
2 years, 1 month ago
B) Around the world with least latency, then you use cloudfront.
upvoted 2 times
Spike2020
2 years, 1 month ago
I change to C. While there is an ip prefix list for cloudfront that you can monitor for changes with API. It sounds too cumbersome for this solution.
upvoted 2 times
...
...
SAPALL
2 years, 1 month ago
B for me
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel