Review Questions – Network Design – ANS-C01 Study Guide

Review Questions

  1. A website hosting custom content that is formatted differently based on the device their users are connecting with has a global footprint. They are upgrading their site that uses a CloudFront distribution network and desire to modify certain HTTP headers at the edge to provide custom content to Android and iOS phones. This requires a rewrite before the content is requested from the origin S3 buckets. What is a good method to use to meet this requirement?
    1. Send all requests to an EC2 instance in the region where the content is located to modify the headers before passing the request to the buckets
    1. Use API Gateway to transform the requests based on the type of device making the request
    1. Use Lambda@edge to preprocess the request based on device type
    1. Implement an application load balancer with policies to rewrite the headers before forwarding the request to the backend server pools
  2. Tip Of The Hat Enterprises is preparing for its annual Black Friday sales event and anticipates a heavy load on its front-end web servers with a high connection count and bursting connections. You have been brought on to the project to recommend a cloud-based networking solution that will not slow down during peak usage. What would you recommend to the design team to account for the additional traffic during the sales event?
    1. Convert all of your EC2 fleet to Lambda serverless with provisioned concurrency
    1. Add read replicas to your RDS backend database
    1. Deploy a network load balancer
    1. Use API Gateway as the application front end
  3. Your company is designing a new financial trading application that is browser based. You are exploring new protocols and architectures to maximize the application’s performance. From a networking perspective, what would you recommend for the standards-based front end to the application?
    1. Use Global Accelerator to reduce network latency from the customer to your trading data
    1. Deploy API Gateway using the WebSockets protocol
    1. Deploy an application load balancer with sticky connections to the backend container services
    1. Use CloudFront to distribute the content at edge locations closer to requesters
  4. Your e-commerce website is designed to host shopping carts on individual web servers instead of using a centralized database. There have been support cases where users have lost the contents of their shopping cart due to poor Internet connections that cause random drops and reconnects. This is causing your company lost revenue and low customer retention. What can be done at the network level to help resolve the issue? (Choose two.)
    1. Implement sticky sessions on the ELB
    1. Configure the target groups to re-establish user connections to the server hosting their shopping cart
    1. Enable session affinity on the load balancer
    1. Verify that health checking is enabled at the session level and to sync incoming connections to the original web server hosting the shopping cart
  5. You are investigating options to protect your CloudFront deployment from external attacks. Which two options would you investigate?
    1. CloudFront DDoS
    1. AWS Shield
    1. AWS Control Tower
    1. Web Application Firewall
  6. Your applications access API Gateway from inside your VPC. IAM is used to provide authentication support for API Gateway. How are the IAM requests passed from the requester to the gateway?
    1. User pools
    1. Sigv4
    1. Cognito
    1. AD connector
  7. What interface contains an IP address and port number combination that accepts incoming connections to the load balancer?
    1. Cognito
    1. Target group
    1. User pool
    1. Transfer accelerator
    1. Listener
  8. Which AWS load balancer listens across all ports in an IP flow and forwards the traffic you define in a listener rule to target groups without modifying the original packet?
    1. Classic load balancer
    1. Network load balancer
    1. Application load balancer
    1. Gateway load balancer
  9. You want to reduce the number of calls to the endpoints and improve the response times of AWS API Gateway. What single solution can you implement to achieve this?
    1. Use a gateway load balancer in front of API Gateway
    1. Gateway caching
    1. Use a CloudFront distribution
    1. Implement a network load balancer
  10. The gateway load balancer listens across all ports in an IP flow and forwards the traffic you define in a listener rule to target groups. Which protocol encapsulates frames in a special header for use in large multitenant cloud deployments such as AWS?
    1. VxLAN
    1. GENEVE protocol
    1. Proxy protocol
    1. WebSockets
  11. Which design requirements should be considered for connection to AWS CloudFront locations? (Choose two.)
    1. Geography
    1. Internet BGP policies
    1. Political constraints
    1. Encryption limitations
  12. Four servers in your PROD target group need to be taken offline for updates. However, you do not want to disrupt existing user connections by forcefully downing the servers. What options do you have to take these servers offline without dropping user sessions? (Choose two.)
    1. Set the deregistration delay
    1. Configure proxy connections
    1. Enable session affinity
    1. Enable configuration draining
  13. You are looking to integrate a token-based authentication method into your API gateway that will give you maximum flexibility to evaluate a request and return an IAM policy to the requester to grant access using a third-party service. What would be a good solution to implement?
    1. Enable Kerberos-based AD authentication
    1. Lambda authorizers
    1. IAM authorization
    1. Make an OAuth API call