Discuss Amazon ANS-C01 Exam Topic 7 Question 14

An ecommerce company is hosting a web application on Amazon EC2 instances to handle continuously changing customer demand. The EC2 instances are part of an Auto Scaling group. The company wants to implement a solution to distribute traffic from customers to the EC2 instances. The company must encrypt all traffic at all stages between the customers and the application servers. No decryption at intermediate points is allowed.

Which solution will meet these requirements?

ACreate an Application Load Balancer (ALB). Add an HTTPS listener to the ALB. Configure the Auto Scaling group to register instances with the ALB's target group.

BCreate an Amazon CloudFront distribution. Configure the distribution with a custom SSL/TLS certificate. Set the Auto Scaling group as the distribution's origin.

CCreate a Network Load Balancer (NLB). Add a TCP listener to the NLB. Configure the Auto Scaling group to register instances with the NLB's target group.

DCreate a Gateway Load Balancer (GLB). Configure the Auto Scaling group to register instances with the GLB's target group.

Suggested Answer: B

Creating a new Route 53 Resolver outbound endpoint in the shared services VPC would enable forwarding of DNS queries from the VPC to on-premises1.Creating forwarding rules for the on-premises hosted domains would enable specifying which domain names are forwarded to the on-premises DNS servers2.Associating the rules with the new Resolver endpoint and each application VPC would enable applying the rules to the VPCs2.This solution would not affect the default DNS resolution behavior of Route 53 Resolver for local VPC domain names and domains that are hosted in Route 53 private hosted zones3.

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

35 comments · newest first

Johanna 11 months ago

NLB (Option C) doesn't support HTTPS, so it's a no-go.

Sharen 11 months ago

Wait, can we really not decrypt at any point? That sounds risky.

Chau 11 months ago

But wouldn't CloudFront (Option B) also work?

Weldon 12 months ago

I agree, ALB is the way to go for this!

Claudio 12 months ago

Option A seems solid with the HTTPS listener.

Clay 1 year ago

I don't think a Gateway Load Balancer is suitable here; it seems more focused on integrating with security appliances rather than handling traffic directly.

Marget 1 year ago

I practiced a similar question about load balancers, and I feel like the NLB might not be the right choice for HTTPS traffic.

Kristian 1 year ago

I think CloudFront could work since it supports SSL/TLS, but I can't recall if it meets the no-decryption requirement.

Skye 1 year ago

I remember that ALBs are great for HTTP/HTTPS traffic, but I'm not sure if they can handle end-to-end encryption without decryption.

Florinda 1 year ago

I think option B with Amazon CloudFront might be the way to go. CloudFront can handle the SSL/TLS encryption, and setting the Auto Scaling group as the origin should address the dynamic demand. The "no decryption" part still has me a bit unsure, but I'll double-check the CloudFront documentation.

Iesha 1 year ago

I'm not sure about this one. The requirement for no decryption at intermediate points makes me hesitant about some of these options. I'll need to review the details of each load balancing service to see which one can truly meet all the requirements.

Amber 1 year ago

Okay, I've got this. The answer is clearly option A - create an Application Load Balancer (ALB) with an HTTPS listener. That way, the traffic is encrypted end-to-end, and the Auto Scaling group can handle the dynamic demand. Simple and effective!

Ranee 1 year ago

Hmm, I'm a bit confused about the requirement for no decryption at intermediate points. That seems to rule out some of the more common load balancing solutions. I'll need to think carefully about which option best meets all the criteria.

Essie 1 year ago

This seems like a straightforward question about load balancing and encryption. I think the key is to find a solution that can handle the dynamic customer demand and encrypt all traffic without any decryption at intermediate points.

Dortha 1 year ago

I'm a bit confused about the sandbox refresh process. Should it be after each push from the partial data sandbox, or only after major releases? I'll need to review the details.

Leonida 1 year ago

This looks like a straightforward question about automating the survey process. I think the key is to leverage Dynamics 365 Marketing and Customer Voice to streamline the workflow.

Tammi 1 year ago

I'd go with Option C. A Network Load Balancer handles TCP traffic well, and it should be able to encrypt the connections too. Seems like a solid choice.

Garry 1 year ago

↳ replying to Tammi

Yeah, Option C is the way to go. It meets the requirements of encrypting traffic and distributing it effectively.

Edelmira 1 year ago

↳ replying to Tammi

I agree, using a Network Load Balancer for this scenario seems like the most appropriate solution.

Marci 1 year ago

↳ replying to Tammi

Option C sounds like a good choice. Network Load Balancer is known for handling TCP traffic efficiently.

Jess 1 year ago

Haha, Option D with the Gateway Load Balancer? That's a new one! I've never even heard of that before. Sounds like someone is trying to trick us.

Tammy 1 year ago

↳ replying to Jess

C) Create a Network Load Balancer (NLB). Add a TCP listener to the NLB. Configure the Auto Scaling group to register instances with the NLB's target group.

Lucille 1 year ago

↳ replying to Jess

B) Create an Amazon CloudFront distribution. Configure the distribution with a custom SSL/TLS certificate. Set the Auto Scaling group as the distribution's origin.

Rosio 1 year ago

↳ replying to Jess

A) Create an Application Load Balancer (ALB). Add an HTTPS listener to the ALB. Configure the Auto Scaling group to register instances with the ALB's target group.

Odelia 1 year ago

I'm not sure about Option B. CloudFront is great for content delivery, but I don't think it's the right fit for this use case. Seems like overkill.

Jules 1 year ago

↳ replying to Odelia

C) Create a Network Load Balancer (NLB). Add a TCP listener to the NLB. Configure the Auto Scaling group to register instances with the NLB's target group.

Lai 1 year ago

↳ replying to Odelia

A) Definitely, ALB with HTTPS listener should be sufficient for encrypting traffic between customers and application servers.

Elouise 1 year ago

↳ replying to Odelia

B) I agree, CloudFront might be too much for this scenario. It's better to go with a simpler solution.

Keith 1 year ago

↳ replying to Odelia

A) Create an Application Load Balancer (ALB). Add an HTTPS listener to the ALB. Configure the Auto Scaling group to register instances with the ALB's target group.

Alpha 2 years ago

I'm not sure, but I think option B with Amazon CloudFront could also work since it allows custom SSL/TLS certificates for encryption.

Brunilda 2 years ago

Option A seems like the obvious choice here. An ALB with HTTPS listener is the perfect solution to encrypt traffic and distribute it to the EC2 instances. Easy to set up and manage.

Ma 1 year ago

↳ replying to Brunilda

I agree, ALB is easy to set up and manage. It's the perfect solution for this scenario.

Katlyn 1 year ago

↳ replying to Brunilda

Option A seems like the best choice. ALB with HTTPS listener will encrypt traffic and distribute it to EC2 instances.

Carin 2 years ago

I agree with Kara. Option A ensures end-to-end encryption without decryption at intermediate points.

Kara 2 years ago

I think option A is the best solution because it uses an Application Load Balancer with HTTPS listener for encryption.

Amazon ANS-C01 Exam - Topic 7 Question 14 Discussion