exam questions

Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 74 discussion

Exam question from Amazon's ANS-C00
Question #: 74
Topic #: 1
[All ANS-C00 Questions]

A company is deploying a non-web application on an Elastic Load Balancing. All targets are servers located on-premises that can be accessed by using AWS
Direct Connect. The company wants to ensure that the source IP addresses of clients connecting to the application are passed all the way to the end server.
How can this requirement be achieved?

  • A. Use a Network Load Balancer to automatically preserve the source IP address.
  • B. Use a Network Load Balancer and enable the X-Forwarded-For attribute.
  • C. Use a Network Load Balancer and enable the ProxyProtocol attribute.
  • D. Use an Application Load Balancer to automatically preserve the source IP address in the X-Forwarded-For header.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ItsmeP
Highly Voted 3 years, 6 months ago
Ans C The Proxy Protocol v2 is an option in NLB which appends the source IP in the TCP packet header. This is relevant since the servers are in on-premise and ALB will not do source IP preservation.
upvoted 11 times
...
walkwolf3
Highly Voted 3 years, 6 months ago
A With Network Load Balancer, the original source IP address and source ports for the incoming connections remain unmodified, so application software need not support X-Forwarded-For https://aws.amazon.com/blogs/aws/new-network-load-balancer-effortless-scaling-to-millions-of-requests-per-second/
upvoted 9 times
JohnnyBG
3 years, 4 months ago
From that link: If you register targets by instance ID, the source IP addresses of the clients are preserved and provided to your applications. If you register targets by IP address, the source IP addresses are the private IP addresses of the load balancer nodes. I agree A as answer
upvoted 2 times
JohnnyBG
3 years, 4 months ago
Actually no I disagree, since target is on premise and only IP address can be configured, answer is C, A is impossible.
upvoted 4 times
...
...
...
Raphaello
Most Recent 1 year ago
Selected Answer: C
NON-WEB APPLICATION. D is not an option. A >> NLB preserve source IP, unless targets are defined with IP and use TCP/TLS C >> NLB need to enable ProxyProtocol in case targets IP use TCP/TLS Ref. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol No sufficient info in the scenario. But since we do not know, just enable Proxy Protocol.
upvoted 1 times
...
squeeze_talus0y
2 years, 7 months ago
Selected Answer: C
https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol
upvoted 1 times
...
RenatoFonseca
3 years ago
Selected Answer: C
Non-web application means you can't use Application Load Balancer. You can use NLB to meet the requirement, and enable Proxy Protocol as an optional setting to add the IP Address in the header of packet. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol
upvoted 3 times
...
zoomac
3 years, 2 months ago
None of the options. Should use NLB and enable Proxy Protocol v2 attribute. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html#proxy-protocol
upvoted 1 times
sapien45
3 years, 1 month ago
Actually one of the option fits exactly the scenario Network Load Balancers use proxy protocol : C
upvoted 1 times
...
...
ciao
3 years, 3 months ago
AWS Network Load Balancers operate at Layer 4 and support the Proxy Protocol. AWS Application Load Balancers operate on Layer 7 and support the X-Forwarded headers. AWS Classic Load Balancers operate at either Layer 7 or Layer 4, they support the both the X-Forwarded headers and the Proxy Protocol.
upvoted 1 times
...
learnwithaniket
3 years, 5 months ago
Network Load Balancer TCP & TLS: the source IP of the client isn’t preserved, enable Proxy Protocol UDP & TCP_UDP: the source IP of the client is preserved
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago