Review Questions – Load Balancing – ANS-C01 Study Guide

Review Questions

The following questions are designed to test your understanding of this chapter’s material. For more information on how to obtain additional questions, please see this book’s introduction.

  1. Your company will be having flash sales on its popular e-commerce site that is hosted on AWS. Because of high connection rates to backend servers that deliver feature-rich content, it is anticipated that traffic will be sent in bursts with large increases in the connection counts in a short time window. Also, the pages delivered will have motion graphics and high-resolution images delivered to every user. You are part of the architecture team and are reviewing ELB options that would best be able to handle this workload. What would you recommend?
    1. Classic load balancer
    1. Network load balancer
    1. Application load balancer
    1. Gateway load balancer
  2. The network analytics application you are offering customers on the Amazon marketplace needs to sit in line with your client’s traffic flow but be transparent. The packets cannot be modified in any way, and the packets entering your VPC from the customer must be the same leaving on the egress flow. There is also a possibility that many of your clients will have overlapping CIDR addressing in the private address space. What AWS solution can you implement to meet this requirement?
    1. Classic load balancer
    1. Network load balancer
    1. Application load balancer
    1. Gateway load balancer
  3. The backend target servers for your load balanced application use machine learning and analytics processing based on locality. The connections are getting erroneous IP source information from the incoming packets, and you have been hired to resolve the issue. What would you recommend to resolve the issue?
    1. Implement geo-proximity in Route 53
    1. Enable the X-Forwarded-For protocol on the servers to read the actual source IP in the header
    1. Implement SSL/TLS passthrough so the ALB does not act as a proxy and change the source IP address
    1. Use cross-zone load balancers so the source IP address does not get modified in transit
  4. You have been asked to implement an intelligent load balancing solution that will support your company website hosted in the AWS us-west-2 region. There will be a mix of customer devices connecting including smartphones, tablets, and laptops. The web application sources HTML content in either rich or sparse pages based on the connected device type. What solution would be able to do header inspection to determine the device type and direct the traffic to the appropriate target group?
    1. Classic load balancer
    1. Network load balancer
    1. Application load balancer
    1. Gateway load balancer
  5. The development team is working on a new e-commerce website, and you have been asked to assist in the networking architecture. The application servers and SQL database replicas need to be able to scale independently of each other and to be able to be upgraded without affecting ongoing operations. What type of load balancer would you use for this design?
    1. External
    1. Internal
    1. Classic
    1. Gateway
    1. Network
  6. Your cybersecurity officer has asked you for recommendations to protect your website hosted on AWS using an application load balancer. He is concerned about SYN and denial-of-service attacks originating from the Internet that could affect your company’s service offerings. What would you recommend as a solution to protect the ALB listener port?
    1. Route 53
    1. CloudFront
    1. CloudWatch
    1. Web Application Firewall
    1. CloudTrail
  7. Your company is planning on expanding its web application services to its European customers. It hosts its server fleet in the Ohio region behind an application load balancer. The deployment team is concerned about network latency from Europe to the United States. What AWS service would reduce these network delays?
    1. Elastic Kubernetes Service
    1. Route 53
    1. CloudTrail
    1. Global Accelerator
    1. Gateway load balancer
  8. You are getting trouble tickets about your e-commerce shopping carts suddenly disappearing, and it is affecting revenue and customer satisfaction. The application team has been investigating each application server sitting behind the ALB and can verify that the shopping carts are still present on the server but not on a customer’s browser. What can be done to resolve this issue?
    1. Enable the GENEVE protocol
    1. Use a network load balancer
    1. Enable session affinity on the ALB
    1. Use cross-zone load balancing
  9. Your e-commerce website needs to be able to have multiple servers to support the high connection counts from Internet users. You have been tasked to recommend a load balancer design to front-end the servers from the Internet. What type of load balancer would you use for this design?
    1. External
    1. Internal
    1. Classic
    1. Gateway
    1. Network
  10. The application team needs to take down an application server in an ALB target group to install a critical patch. However, when you check CloudWatch, you notice that there are more than 350 sessions active on the server. Since you do not want to drop active sessions, what solution is offered by AWS to take this server offline without affecting these connections?
    1. Slow stop
    1. Disable health checking
    1. Deletion protection
    1. Connection draining
  11. What configuration architecture does not have any digital certificates locally installed on the load balancer that passes all encrypted traffic to the backend servers for them to perform the encryption and decryption functions?
    1. Offload
    1. GENEVE groups
    1. Deregistration
    1. SSL/TLS passthrough
  12. What feature can be enabled to prevent a load balancer from being taken permanently offline?
    1. Deletion protection
    1. Session affinity
    1. Deregistration
    1. Forward proxy protection
  13. Which protocol preserves the source IP address of the originating host?
    1. Session affinity
    1. Proxy protocol
    1. GENEVE protocol
    1. TLS
  14. What ELB feature is enabled to prevent a new target from being overwhelmed with connection requests when it is first brought online?
    1. Session affinity
    1. Slow start
    1. Offload
    1. Connection limiting
  15. What is used to determine that the backend servers are operational and able to accept connections from the ELB?

Kubernetes

Round-robin

Offload

Health checking

  1. What are two ways to secure the public listener on your application load balancer?
    1. CloudTrail
    1. CloudFront
    1. Web Application Firewall
    1. CloudWatch
  2. What target types does an application load balancer support? (Select three.)
    1. Instance ID
    1. IP address
    1. Kinesis
    1. Lambda
    1. Redshift ID
    1. Cognito ID
  3. Name two load distribution algorithms used by the AWS ELB family of load balancers.
    1. Latency
    1. Affinity
    1. Round-robin
    1. Least outstanding
  4. Which design is where the load balancer takes responsibility for the encrypting and decrypting of in-flight traffic instead of the backend web servers?
    1. Application load balancer
    1. SSL/TLS offload
    1. SSL passthrough
    1. Network load balancer
  5. Which ELB feature can dynamically add and remove backend processing capacity based on the current load?
    1. Autoscaling
    1. Autostandby
    1. Autoredundancy
    1. Target groups