Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 101 discussion

Exam question from Amazon's ANS-C00

Question #: 101
Topic #: 1

The Security department has mandated that all outbound traffic from a VPC toward an on-premises datacenter must go through a security appliance that runs on an Amazon EC2 instance.
Which of the following maximizes network performance on AWS? (Choose two.)

A. Support for the enhanced networking drivers
B. Support for sending traffic over the Direct Connect connection
C. The instance sizes and families supported by the security appliance
D. Support for placement groups within the VPC
E. Security appliance support for multiple elastic network interfaces

Show Suggested Answer

Suggested Answer: BC 🗳️

by LexyA at May 8, 2020, 6:25 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

guruguru

Highly Voted 3 years, 9 months ago

A,C. adding ENI won't improve the performance.

upvoted 14 times

kvirk

3 years, 9 months ago

I agree, A,C is correct answer

upvoted 3 times

...

ravirajani

Highly Voted 3 years, 8 months ago

A - Enhanced networking should be supported for best performance which ever instance is supported by security appliance. B - Best to have a Dx connection with on-premis.

upvoted 5 times

jpvdham

3 years, 8 months ago

But how would you enable direct connect support on a EC2 instance?: Support for sending traffic over the Direct Connect connection. This is has nothing to do with te EC2 instance (more with routes). So imho AC are correct.

upvoted 4 times

Ishu_awsguy

3 years, 8 months ago

The question is about maximising network performance on AWS. So we must consider DX. the traffic origination from onprem lands to TGW/VGW via DX and then the next hop can be firewall appliances like Checkpoint and Palo Alto. C is very general , it is obvious that we have to do deployment on supported instances , how does it do any value add

upvoted 2 times

...

Christina666

Most Recent 7 months, 3 weeks ago

Selected Answer: AD

To increase network performance and reduce latency, you can launch instances in a placement group. You can get significantly higher packet per second (PPS) performance using enhanced networking. You can accelerate high performance computing and machine learning applications using an Elastic Fabric Adapter (EFA), which is a network device that you can attach to a supported instance type.

upvoted 1 times

...

nklocal

3 years ago

A B and C all correct. B and C more accurate if FW instance is concerned

upvoted 1 times

...

ercicho

3 years, 5 months ago

Selected Answer: AC

is the right one

upvoted 1 times

...

walkwolf3

3 years, 8 months ago

AC B. I think all instances support sending traffic over Direct Connect, this option is distracting.

upvoted 4 times

...

StelSen

3 years, 8 months ago

A, C and B are correct answer. However from priority wise, we need to ensure Security appliance is not a bottleneck for the traffic. We need enhanced networking and also correct instance family/size, so that all VPCs can send traffic without losing/slow. A&C are very important. Now from that instance to on-premise is good to have DX also. But if instance itself have a problem , what is the point of DX in place?

upvoted 1 times

...