ANS-C01 Question 55
Select 3A company is deploying a web application in AWS that requires high availability, scalability, and security. The application consists of multiple EC2 instances deployed across two Availability Zones. The company wants to ensure that traffic is distributed evenly and that only healthy instances receive traffic. Additionally, they require protection against common web exploits. Which combination of solutions should the company use to meet these requirements?
- A
Use an Application Load Balancer to distribute traffic across the EC2 instances and configure health checks for the target group.
- B
Deploy a Network Load Balancer to distribute traffic across the EC2 instances for better performance and configure health checks.
- C
Enable AWS WAF (Web Application Firewall) on the Application Load Balancer to protect against common web exploits.
- D
Deploy EC2 Auto Scaling groups to automatically add or remove EC2 instances based on traffic demand.
- E
Use Elastic IPs to route traffic directly to individual EC2 instances in each Availability Zone.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet the application's requirements for high availability, scalability, and security, an Application Load Balancer should be used to evenly distribute HTTP/HTTPS traffic across EC2 instances, with health checks configured to route traffic only to healthy instances. AWS WAF can be enabled on the Application Load Balancer to protect against common web exploits. EC2 Auto Scaling groups ensure that the application can scale dynamically based on traffic demands. This combination of solutions addresses all aspects of the requirements effectively.
- A. Correct.
Correct. An Application Load Balancer is designed for HTTP/HTTPS traffic distribution and provides features such as host-based and path-based routing. It also supports health checks to ensure that only healthy instances receive traffic.
- B. Incorrect.
Incorrect. While a Network Load Balancer is highly performant, it is not optimized for HTTP/HTTPS traffic and lacks features such as host-based routing and integration with AWS WAF. It is more suitable for TCP or UDP workloads.
- C. Correct.
Correct. AWS WAF integrates with the Application Load Balancer to provide protection against common web exploits, such as SQL injection and cross-site scripting (XSS). This ensures the security requirements of the application are met.
- D. Correct.
Correct. EC2 Auto Scaling groups allow the application to automatically scale in or out based on traffic demand, ensuring high availability and scalability.
- E. Incorrect.
Incorrect. Elastic IPs are used for static IP allocation but do not provide load balancing or health check capabilities. Using Elastic IPs directly would not meet the high availability or scalability requirements.