Amazon ANS-C01 Exam - Topic 5 Question 36 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 36
Topic #: 5

A company has deployed a new web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Enterprise customers from around the world will use the application. Employees of these enterprise customers will connect to the application over HTTPS from office locations.

The company must configure firewalls to allow outbound traffic to only approved IP addresses. The employees of the enterprise customers must be able to access the application with the least amount of latency.

Which change should a network engineer make in the infrastructure to meet these requirements?

ACreate a new Network Load Balancer (NLB). Add the ALB as a target of the NLB.

BCreate a new Amazon CloudFront distribution. Set the ALB as the distribution's origin.

CCreate a new accelerator in AWS Global Accelerator. Add the ALB as an accelerator endpoint.

DCreate a new Amazon Route 53 hosted zone. Create a new record to route traffic to the ALB.

Show Suggested Answer

Suggested Answer: B

Amazon CloudFront is a content delivery network (CDN) that can speed up the delivery of static and dynamic web content, such as images, videos, and APIs2.CloudFront can also provide end-to-end encryption for HTTPS traffic by using SSL certificates from AWS Certificate Manager (ACM) or other sources2.CloudFront can also support session affinity (sticky sessions) with a load balancer-generated cookie or an application-based cookie policy2.

by Virgilio at Sep 18, 2024, 11:56 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Derrick

3 months ago

Wait, can CloudFront really handle that much traffic?

upvoted 0 times

...

Mira

3 months ago

I agree, B is the way to go!

upvoted 0 times

...

Laticia

3 months ago

A new Route 53 zone? Not sure that helps with latency.

upvoted 0 times

...

Stephanie

4 months ago

I think C is the best choice for global access.

upvoted 0 times

...

Billi

4 months ago

Option B seems solid for reducing latency.

upvoted 0 times

...

Willard

4 months ago

I feel like Route 53 is more about DNS management, so it might not directly address the latency issue we're facing here.

upvoted 0 times

...

Myra

4 months ago

I practiced a similar question where we had to choose between ALB and NLB, but I can't recall if the NLB would help with latency in this case.

upvoted 0 times

...

Tess

4 months ago

I think Global Accelerator could be a good choice since it optimizes the path to the ALB, but I need to double-check the requirements.

upvoted 0 times

...

Katina

5 months ago

I remember studying about using CloudFront for reducing latency, but I'm not sure if it's the best option here.

upvoted 0 times

...

Berry

5 months ago

I think Option B with CloudFront is an interesting idea, but I'm not sure if it fully addresses the need to control outbound traffic. The Global Accelerator option seems like the most straightforward solution.

upvoted 0 times

...

Phil

5 months ago

I'm not sure if creating a new Network Load Balancer (Option A) is the best approach here. That might just add an extra layer of complexity without really solving the core problem.

upvoted 0 times

...

Dana

5 months ago

Okay, I've got this. Option C is the way to go. AWS Global Accelerator will provide a stable endpoint for the enterprise customers to connect to, while also allowing the company to control the outbound firewall rules.

upvoted 0 times

...

Sang

5 months ago

Hmm, I'm a bit confused on the difference between the options. I'll need to review the details of each one more carefully to decide which one best meets the requirements.

upvoted 0 times

...

Eloisa

5 months ago

I think the key here is to find a way to route traffic to the ALB while also allowing the company to control outbound traffic. Option C with AWS Global Accelerator seems like the best choice to me.

upvoted 0 times

...

Felicidad

5 months ago

I've got this one! The procurement management plan is a subsidiary of the project management plan. It's all about how the project will acquire the necessary goods and services to execute the project successfully.

upvoted 0 times

...

Jina

1 year ago

Haha, the employees better not try to sneak in a few Netflix sessions during their work hours! Option C seems like the most balanced solution for this use case.

upvoted 0 times

Cletus

1 year ago

Yeah, it's important to prioritize performance for the enterprise customers accessing the application.

upvoted 0 times

...

Alonso

1 year ago

I agree, using AWS Global Accelerator would ensure low latency for the employees.

upvoted 0 times

...

Niesha

1 year ago

Option C seems like the most balanced solution for this use case.

upvoted 0 times

...

Ozell

1 year ago

But wouldn't using AWS Global Accelerator reduce latency for the enterprise customers?

upvoted 0 times

...

Franklyn

1 year ago

I disagree, I believe the answer is D) Create a new Amazon Route 53 hosted zone.

upvoted 0 times

...

Janna

1 year ago

Option B with CloudFront sounds interesting, but I'm not sure if it will provide the same level of control over the firewall rules as the Global Accelerator solution in option C.

upvoted 0 times

Adolph

1 year ago

It's important to consider the specific needs of the enterprise customers when choosing the best solution.

upvoted 0 times

...

Paul

1 year ago

Global Accelerator in option C can provide better control over firewall rules and optimize the routing of traffic.

upvoted 0 times

...

Mila

1 year ago

Option B with CloudFront can help improve latency by caching content closer to the users.

upvoted 0 times

...

Ozell

1 year ago

I think the answer is C) Create a new accelerator in AWS Global Accelerator.

upvoted 0 times

...

Marjory

1 year ago

I think option C is the way to go. Global Accelerator will help reduce latency for the enterprise customers while the firewall rules can be configured to allow only approved IP addresses.

upvoted 0 times