Amazon ANS-C01 Exam - Topic 4 Question 17 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 17
Topic #: 4

A company is deploying a non-web application on an AWS load balancer. All targets are servers located on-premises that can be accessed by using AWS Direct Connect. The company wants to ensure that the source IP addresses of clients connecting to the application are passed all the way to the end server.

How can this requirement be achieved?

AUse a Network Load Balancer to automatically preserve the source IP address.

BUse a Network Load Balancer and enable the X-Forwarded-For attribute.

CUse a Network Load Balancer and enable the ProxyProtocol v2 attribute.

DUse an Application Load Balancer to automatically preserve the source IP address in the X-Forwarded-For header.

Show Suggested Answer

Suggested Answer: C

https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol

by Lai at Dec 12, 2023, 04:44 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joni

3 months ago

Wait, can you really use a Network Load Balancer for on-prem servers?

upvoted 0 times

...

Loren

3 months ago

Totally agree with A, it's straightforward.

upvoted 0 times

...

Brigette

3 months ago

D sounds right, but isn't it just for web apps?

upvoted 0 times

...

Wilda

4 months ago

I think C is better, ProxyProtocol v2 is solid.

upvoted 0 times

...

Caprice

4 months ago

A is the way to go for preserving source IPs!

upvoted 0 times

...

Annabelle

4 months ago

I’m a bit confused; I thought Application Load Balancers were better for web traffic, so I’m not sure if they can handle this non-web application scenario.

upvoted 0 times

...

Truman

4 months ago

I practiced a question similar to this, and I feel like ProxyProtocol v2 might be the right choice for preserving the source IP with a Network Load Balancer.

upvoted 0 times

...

Olga

4 months ago

I think the X-Forwarded-For header is more relevant for Application Load Balancers, but I could be mixing it up with something else.

upvoted 0 times

...

Willie

5 months ago

I remember that Network Load Balancers are designed to preserve the source IP addresses, but I'm not sure if I need to enable anything extra for that.

upvoted 0 times

...

Hui

5 months ago

I feel pretty confident about this one. The question is clear that the company wants to preserve the source IP, so the Network Load Balancer with the ProxyProtocol v2 attribute is the way to go. That will pass the source IP all the way through.

upvoted 0 times

...

Lenna

5 months ago

Okay, I've got a strategy here. Since the question specifies a non-web application, I'm guessing the Network Load Balancer is the way to go. The X-Forwarded-For and ProxyProtocol v2 options sound like they could work, so I'll focus on those.

upvoted 0 times

...

Justine

5 months ago

Hmm, I'm a bit unsure about this one. I know the Network Load Balancer can preserve source IPs, but I'm not sure about the specifics of the X-Forwarded-For and ProxyProtocol v2 attributes. I'll need to review those.

upvoted 0 times

...

Margurite

5 months ago

This looks like a pretty straightforward networking question. I think the key is understanding how the different AWS load balancer types handle source IP preservation.

upvoted 0 times

...

Janey

5 months ago

This looks like a pretty straightforward question. I think the key is to focus on the requirements - we need to ensure that changes to the data are recorded and that we can easily roll back any accidental edits or deletions. Based on that, I'd say the answer is Object Versioning.

upvoted 0 times

...

Clement

5 months ago

I'm pretty sure the answer is C and B. Encrypted connections and digitally signed payloads are the two encryption principles that should be applied to secure APIs. The other options just don't seem secure.

upvoted 0 times

...

Alex

5 months ago

The key here is to focus on the subscriber data and how to display content based on that. I'd go with dynamic content and personalization strings.

upvoted 0 times

...

Lanie

5 months ago

Could it possibly be B? I'm a bit confused, but structural measures doesn't really fit the context based on what we studied.

upvoted 0 times

...

Elliot

5 months ago

I think I saw a practice question that mentioned how general partnerships don't disclose financial info like private companies do, but it's a bit hazy now.

upvoted 0 times

...

Cristina

2 years ago

Haha, yeah, the fewer steps the better, am I right? Although, if we're going for the A+ answer, Option C with ProxyProtocol v2 might be the way to go. Gotta show off those advanced load balancer skills, you know?

upvoted 0 times

...

Tula

2 years ago

Ooh, look at you, Mr. Overachiever! I think I'm going to stick with Option A. It's the most straightforward and gets the job done without any extra fuss. Though I do appreciate your enthusiasm, Michael.

upvoted 0 times

Frederick

2 years ago

Yep, Option A it is then! Thanks for the input, everyone.

upvoted 0 times

...

Pearlie

2 years ago

I'm glad we're all on the same page with Option A.

upvoted 0 times

...

Pearlie

2 years ago

Great choice, Option A is definitely the easiest way to achieve that requirement.

upvoted 0 times

...

Hyun

2 years ago

I think I'll go with Option A as well, keep it simple.

upvoted 0 times

...

Teresita

2 years ago

I agree, it seems like the most straightforward option.

upvoted 0 times

...

Dolores

2 years ago

Option A sounds like the best choice to me.

upvoted 0 times

...

Isidra

2 years ago

Hmm, I'm leaning towards Option A. It just seems like the cleanest and most straightforward way to meet the requirement. Plus, I don't really want to deal with enabling any additional attributes if I don't have to.

upvoted 0 times

...