ANS-C01 Exam Dumps : Amazon AWS Certified Advanced Networking - Specialty

MACsec for Direct Connect:

MACsec (Media Access Control Security) is an IEEE standard (802.1AE) for encrypting traffic at Layer 2. AWS Direct Connect supports MACsec on dedicated connections of 10 Gbps and 100 Gbps capacity. This ensures that all WAN traffic over the Direct Connect connection is encrypted, meeting regulatory requirements.

Does Not Affect Bandwidth:

MACsec operates at the physical layer (Layer 2), and its encryption overhead is negligible. This ensures that the company's bandwidth capacity is not affected.

Existing Direct Connect Connection:

Configuring MACsec on the port of the existing Direct Connect connection avoids the need to establish a new connection, reducing complexity and costs.

When a client queries a DNS server for a domain name, the DNS server typically starts by looking for NS records to determine which name servers are authoritative for the domain. The DNS server then queries the authoritative name servers to obtain the information about the domain that the client requested. For example, suppose you own the domain example.com, but you want to delegate control of the subdomain sub.example.com to a different set of name servers. You would create NS records in the example.com zone file that point to the name servers for sub.example.com. This tells DNS servers that the name servers for sub.example.com are authoritative for that subdomain, and they should query those name servers for any requests related to sub.example.com.

When adding instances in a new Availability Zone to an existing Network Load Balancer (NLB), it is important to ensure that the new Availability Zone is enabled on the NLB. This will allow traffic to be routed to instances in both Availability Zones. This can be done by editing the settings of the NLB and selecting the new Availability Zone from the list of available zones.