Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon ANS-C01 Exam - Topic 5 Question 36 Discussion

A company has deployed a new web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Enterprise customers from around the world will use the application. Employees of these enterprise customers will connect to the application over HTTPS from office locations.The company must configure firewalls to allow outbound traffic to only approved IP addresses. The employees of the enterprise customers must be able to access the application with the least amount of latency.Which change should a network engineer make in the infrastructure to meet these requirements?
B) Create a new Amazon CloudFront distribution. Set the ALB as the distribution's origin.
A) Create a new Network Load Balancer (NLB). Add the ALB as a target of the NLB.
C) Create a new accelerator in AWS Global Accelerator. Add the ALB as an accelerator endpoint.
D) Create a new Amazon Route 53 hosted zone. Create a new record to route traffic to the ALB.

Amazon ANS-C01 Exam - Topic 5 Question 36 Discussion

Actual exam question for Amazon's ANS-C01 exam
Question #: 36
Topic #: 5
[All ANS-C01 Questions]

A company has deployed a new web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Enterprise customers from around the world will use the application. Employees of these enterprise customers will connect to the application over HTTPS from office locations.

The company must configure firewalls to allow outbound traffic to only approved IP addresses. The employees of the enterprise customers must be able to access the application with the least amount of latency.

Which change should a network engineer make in the infrastructure to meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: B

Amazon CloudFront is a content delivery network (CDN) that can speed up the delivery of static and dynamic web content, such as images, videos, and APIs2.CloudFront can also provide end-to-end encryption for HTTPS traffic by using SSL certificates from AWS Certificate Manager (ACM) or other sources2.CloudFront can also support session affinity (sticky sessions) with a load balancer-generated cookie or an application-based cookie policy2.


by Virgilio at Sep 18, 2024, 11:56 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Derrick
9 months ago
Wait, can CloudFront really handle that much traffic?
upvoted 0 times
...
Mira
9 months ago
I agree, B is the way to go!
upvoted 0 times
...
Laticia
10 months ago
A new Route 53 zone? Not sure that helps with latency.
upvoted 0 times
...
Stephanie
10 months ago
I think C is the best choice for global access.
upvoted 0 times
...
Billi
10 months ago
Option B seems solid for reducing latency.
upvoted 0 times
...
Willard
10 months ago
I feel like Route 53 is more about DNS management, so it might not directly address the latency issue we're facing here.
upvoted 0 times
...
Myra
11 months ago
I practiced a similar question where we had to choose between ALB and NLB, but I can't recall if the NLB would help with latency in this case.
upvoted 0 times
...
Tess
11 months ago
I think Global Accelerator could be a good choice since it optimizes the path to the ALB, but I need to double-check the requirements.
upvoted 0 times
...
Katina
11 months ago
I remember studying about using CloudFront for reducing latency, but I'm not sure if it's the best option here.
upvoted 0 times
...
Berry
11 months ago
I think Option B with CloudFront is an interesting idea, but I'm not sure if it fully addresses the need to control outbound traffic. The Global Accelerator option seems like the most straightforward solution.
upvoted 0 times
...
Phil
11 months ago
I'm not sure if creating a new Network Load Balancer (Option A) is the best approach here. That might just add an extra layer of complexity without really solving the core problem.
upvoted 0 times
...
Dana
11 months ago
Okay, I've got this. Option C is the way to go. AWS Global Accelerator will provide a stable endpoint for the enterprise customers to connect to, while also allowing the company to control the outbound firewall rules.
upvoted 0 times
...
Sang
11 months ago
Hmm, I'm a bit confused on the difference between the options. I'll need to review the details of each one more carefully to decide which one best meets the requirements.
upvoted 0 times
...
Eloisa
11 months ago
I think the key here is to find a way to route traffic to the ALB while also allowing the company to control outbound traffic. Option C with AWS Global Accelerator seems like the best choice to me.
upvoted 0 times
...
Felicidad
11 months ago
I've got this one! The procurement management plan is a subsidiary of the project management plan. It's all about how the project will acquire the necessary goods and services to execute the project successfully.
upvoted 0 times
...
Jina
2 years ago
Haha, the employees better not try to sneak in a few Netflix sessions during their work hours! Option C seems like the most balanced solution for this use case.
upvoted 0 times
Cletus
2 years ago
Yeah, it's important to prioritize performance for the enterprise customers accessing the application.
upvoted 0 times
...
Alonso
2 years ago
I agree, using AWS Global Accelerator would ensure low latency for the employees.
upvoted 0 times
...
Niesha
2 years ago
Option C seems like the most balanced solution for this use case.
upvoted 0 times
...
...
Ozell
2 years ago
But wouldn't using AWS Global Accelerator reduce latency for the enterprise customers?
upvoted 0 times
...
Franklyn
2 years ago
I disagree, I believe the answer is D) Create a new Amazon Route 53 hosted zone.
upvoted 0 times
...
Janna
2 years ago
Option B with CloudFront sounds interesting, but I'm not sure if it will provide the same level of control over the firewall rules as the Global Accelerator solution in option C.
upvoted 0 times
Adolph
2 years ago
It's important to consider the specific needs of the enterprise customers when choosing the best solution.
upvoted 0 times
...
Paul
2 years ago
Global Accelerator in option C can provide better control over firewall rules and optimize the routing of traffic.
upvoted 0 times
...
Mila
2 years ago
Option B with CloudFront can help improve latency by caching content closer to the users.
upvoted 0 times
...
...
Ozell
2 years ago
I think the answer is C) Create a new accelerator in AWS Global Accelerator.
upvoted 0 times
...
Marjory
2 years ago
I think option C is the way to go. Global Accelerator will help reduce latency for the enterprise customers while the firewall rules can be configured to allow only approved IP addresses.
upvoted 0 times
Mickie
2 years ago
Let's go ahead and create a new accelerator in AWS Global Accelerator and add the ALB as an accelerator endpoint.
upvoted 0 times
...
Carin
2 years ago
That sounds like the best solution for this scenario.
upvoted 0 times
...
Isaac
2 years ago
I agree, it will also allow us to configure the firewall rules to only allow approved IP addresses.
upvoted 0 times
...
Willard
2 years ago
Option C is a good choice. Global Accelerator can help reduce latency for the enterprise customers.
upvoted 0 times
...
...

Save Cancel