Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 74 discussion

Exam question from Amazon's ANS-C00

Question #: 74
Topic #: 1

A company is deploying a non-web application on an Elastic Load Balancing. All targets are servers located on-premises that can be accessed by using AWS
Direct Connect. The company wants to ensure that the source IP addresses of clients connecting to the application are passed all the way to the end server.
How can this requirement be achieved?

A. Use a Network Load Balancer to automatically preserve the source IP address.
B. Use a Network Load Balancer and enable the X-Forwarded-For attribute.
C. Use a Network Load Balancer and enable the ProxyProtocol attribute.
D. Use an Application Load Balancer to automatically preserve the source IP address in the X-Forwarded-For header.

Show Suggested Answer

Suggested Answer: C 🗳️

by walkwolf3 at Aug. 26, 2021, 12:32 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ItsmeP

Highly Voted 3 years, 8 months ago

Ans C The Proxy Protocol v2 is an option in NLB which appends the source IP in the TCP packet header. This is relevant since the servers are in on-premise and ALB will not do source IP preservation.

upvoted 11 times

...

walkwolf3

Highly Voted 3 years, 8 months ago

A With Network Load Balancer, the original source IP address and source ports for the incoming connections remain unmodified, so application software need not support X-Forwarded-For https://aws.amazon.com/blogs/aws/new-network-load-balancer-effortless-scaling-to-millions-of-requests-per-second/

upvoted 9 times

JohnnyBG

3 years, 6 months ago

From that link: If you register targets by instance ID, the source IP addresses of the clients are preserved and provided to your applications. If you register targets by IP address, the source IP addresses are the private IP addresses of the load balancer nodes. I agree A as answer

upvoted 2 times

JohnnyBG

3 years, 6 months ago

Actually no I disagree, since target is on premise and only IP address can be configured, answer is C, A is impossible.

upvoted 4 times

...

Raphaello

Most Recent 1 year, 2 months ago

Selected Answer: C

NON-WEB APPLICATION. D is not an option. A >> NLB preserve source IP, unless targets are defined with IP and use TCP/TLS C >> NLB need to enable ProxyProtocol in case targets IP use TCP/TLS Ref. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol No sufficient info in the scenario. But since we do not know, just enable Proxy Protocol.

upvoted 1 times

...

squeeze_talus0y

2 years, 9 months ago

Selected Answer: C

https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol

upvoted 1 times

...

RenatoFonseca

3 years, 2 months ago

Selected Answer: C

Non-web application means you can't use Application Load Balancer. You can use NLB to meet the requirement, and enable Proxy Protocol as an optional setting to add the IP Address in the header of packet. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol

upvoted 3 times

...

zoomac

3 years, 4 months ago

None of the options. Should use NLB and enable Proxy Protocol v2 attribute. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol

upvoted 1 times

sapien45

3 years, 3 months ago

Actually one of the option fits exactly the scenario Network Load Balancers use proxy protocol : C

upvoted 1 times

...

ciao

3 years, 5 months ago

AWS Network Load Balancers operate at Layer 4 and support the Proxy Protocol. AWS Application Load Balancers operate on Layer 7 and support the X-Forwarded headers. AWS Classic Load Balancers operate at either Layer 7 or Layer 4, they support the both the X-Forwarded headers and the Proxy Protocol.

upvoted 1 times

...

learnwithaniket

3 years, 7 months ago

Network Load Balancer TCP & TLS: the source IP of the client isn’t preserved, enable Proxy Protocol UDP & TCP_UDP: the source IP of the client is preserved

upvoted 4 times

...