exam questions

Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 81 discussion

Exam question from Amazon's ANS-C00
Question #: 81
Topic #: 1
[All ANS-C00 Questions]

A company has an application running on Amazon EC2 instances in a private subnet that connects to a third-party service provider's public HTTP endpoint through a NAT gateway. As request rates increase, new connections are starting to fail. At the same time, the ErrorPortAllocation Amazon CloudWatch metric count for the NAT gateway is increasing.
Which of the following actions should improve the connectivity issues? (Choose two.)

  • A. Allocate additional Elastic IP addresses to the NAT gateway.
  • B. Request that the third-party service provider implement HTTP keepalive.
  • C. Implement TCP keepalive on the client instances.
  • D. Create additional NAT gateways and update the private subnet route table to introduce the new NAT gateways.
  • E. Create additional NAT gateways in the public subnet and split client instances into multiple private subnets, each with a route to a different NAT gateway.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
Reference:
https://aws.amazon.com/premiumsupport/knowledge-center/vpc-resolve-port-allocation-errors/

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
guruguru
Highly Voted 3 years, 7 months ago
C, and E. https://aws.amazon.com/premiumsupport/knowledge-center/vpc-resolve-port-allocation-errors/ Limit the number of connections that clients can make to a single destination. Keeplive reduce the number of new connection establish.
upvoted 16 times
...
Johnny_Green
Highly Voted 3 years, 7 months ago
The issue with D is that you still only have ONE private subnet which has ONE route table. Having multiple default routes in a single route table won't work. Therefore, I will go with C and E.
upvoted 9 times
Ishu_awsguy
3 years, 6 months ago
It doesnt really mention it. the language is update the private route table, there an be multiple in the backend
upvoted 1 times
Ishu_awsguy
3 years, 6 months ago
the question information isnt too good. C is also right. So may be ill go with C and E.
upvoted 1 times
...
...
...
PorkChop1999
Most Recent 1 year, 1 month ago
Selected Answer: AE
From here: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html Each IPv4 address can support up to 55,000 simultaneous connections to each unique destination. A unique destination is identified by a unique combination of destination IP address, the destination port, and protocol (TCP/UDP/ICMP). You can increase this limit by associating up to 8 IPv4 addresses to your NAT Gateways (1 primary IPv4 address and 7 secondary IPv4 addresses). You are limited to associating 2 Elastic IP addresses to your public NAT gateway by default. You can increase this limit by requesting a quota adjustment. For more information, see Elastic IP addresses.
upvoted 1 times
...
hello_aws
2 years, 8 months ago
Selected Answer: CE
C & E make sense
upvoted 1 times
...
ongre_
2 years, 9 months ago
Selected Answer: CE
C and E as per the link: https://aws.amazon.com/premiumsupport/knowledge-center/vpc-resolve-port-allocation-errors/
upvoted 1 times
...
Bobip
2 years, 10 months ago
Why A. is wrong: You can associate exactly one Elastic IP address with a public NAT gateway. You cannot disassociate an Elastic IP address from a NAT gateway after it's created. To use a different Elastic IP address for your NAT gateway, you must create a new NAT gateway with the required address, update your route tables, and then delete the existing NAT gateway if it's no longer required. Ref: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
upvoted 1 times
Becklang
1 year, 7 months ago
NAT gateways support up to 55,000 simultaneous connections to each destination
upvoted 1 times
...
...
nklocal
2 years, 10 months ago
B and E
upvoted 1 times
...
nklocal
2 years, 11 months ago
D&E are correct
upvoted 1 times
...
hecong
2 years, 11 months ago
Selected Answer: BE
https://aws.amazon.com/premiumsupport/knowledge-center/vpc-resolve-port-allocation-errors/?nc1=h_ls ・Create a NAT gateway in each Availability Zone, and then distribute your clients across Availability Zones. Route traffic to the internet using a NAT gateway in the same Availability Zone as your client to reduce cross Availability Zone data charges.
upvoted 1 times
...
sapien45
3 years, 2 months ago
Keepalive is implemented on server side, not client. might help reduce network congestion if same client , reaccess server. B and E
upvoted 2 times
...
sajoz123
3 years, 4 months ago
B & E for me....HTTP Keepalive to keep the TCP session open and NAT gateways to distribute the load and avoid port exhaustion on the NAT Gateway
upvoted 1 times
...
learnwithaniket
3 years, 6 months ago
C,E https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-troubleshooting.html
upvoted 1 times
...
Huy
3 years, 6 months ago
TCP keep alive doesn't mean reusing the TCP connection. HTTP-keep alive does. Therefore answer should be B & E.
upvoted 3 times
abc321
3 years, 6 months ago
I dont understand why E? application is in private subnet .. traffic will be going to NAT gw. E suggests to create NAT gw in public subnet.
upvoted 1 times
StelSen
3 years, 6 months ago
OMG. This is basic. NAT Gateways has to be created in public subnet only, in order to reach to internet via IGW.
upvoted 1 times
...
...
Smartphone
3 years, 6 months ago
E does not look good.C looks more close. TCP keepalive Prevents disconnection due to network inactivity. The other useful goal of keepalive is to prevent inactivity from disconnecting the channel. It's a very common issue, when you are behind a NAT proxy or a firewall, to be disconnected without a reason.
upvoted 1 times
Smartphone
3 years, 6 months ago
Sorry, Read B in place of E, in the above comment.
upvoted 1 times
...
...
...
NSF2
3 years, 6 months ago
Answers A and D are not correct at all. It’s the tie between B and C HTTP keep alive can set the timeout and number if request, which is potential resolution as per below site https://aws.amazon.com/premiumsupport/knowledge-center/vpc-resolve-port-allocation-errors/ TCP keep alive on the other hand is a way to keep the connection active so might not work here. So my answers are B E
upvoted 1 times
...
eeghai7thioyaiR4
3 years, 7 months ago
C is wrong We have an HTTP connexion built on top of a TCP socket Without HTTP keepalive, the client connects to the server (through TCP), make a request, then disconnects. That disconnect shutdown the TCP connection, that will never be used again. With HTTP keepalive, the client connects to the server (through TCP), make a request, then keep the connection UP, just in case. If 10sec later, a new request has to be made, it will use the existing connection. So, if you have no HTTP keepalive, TCP keepalive is useless, because the connection will not timeout : it will be shutdown on purpose Answers are B && E
upvoted 2 times
...
Huntkey
3 years, 7 months ago
Keepalive actually helps reduce the number of sessions. The NAT gateway will keep an orphan session for up to 350 seconds before releasing the port. If the instance uses a keepalive every 30 seconds, it will detect that the session is dead and it will sent an RST packet to reset it. NAT gateway will release the session upon receiving the RST packet as well. CE are correct
upvoted 1 times
...
VEV
3 years, 7 months ago
CE https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-troubleshooting.html#nat-gateway-troubleshooting-timeout
upvoted 1 times
JamesTR
3 years, 7 months ago
Your link talks about connection being dropped, not Port Allocation Errors. BE looks good for me ( https://www.imperva.com/learn/performance/http-keep-alive/ )
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago