ANS-C01 Question 56
Select 2Your company hosts a highly available web application that serves global users. The application is deployed across multiple AWS Regions. You are tasked with designing a solution that ensures high availability, scalability, and security for incoming traffic. The solution must route users to the nearest AWS Region based on latency, distribute traffic across instances in each Region, and handle encrypted traffic end-to-end. Which combination of services and configurations should you use?
- A
Use Route 53 with a latency-based routing policy to direct users to the nearest Region, and deploy an Application Load Balancer (ALB) in each Region.
- B
Use a Network Load Balancer (NLB) in each Region to distribute traffic and rely on Route 53 geolocation routing for directing users.
- C
Enable HTTPS listeners on the Application Load Balancers and configure SSL/TLS certificates using AWS Certificate Manager (ACM) in each Region.
- D
Deploy an Elastic Load Balancer (Classic Load Balancer) in each Region and configure it for SSL termination.
- E
Use Route 53 weighted routing to distribute traffic evenly across Regions and an Application Load Balancer in each Region.
Show answer and explanation
Correct answers: A, C
Explanation
To meet the requirements of high availability, scalability, and security, Route 53 latency-based routing ensures users are directed to the nearest Region based on latency, improving performance. Deploying ALBs in each Region provides Layer 7 load balancing features, including path-based routing and SSL termination. Using ACM for SSL/TLS certificates ensures secure traffic encryption end-to-end. This combination of services satisfies the requirements of the task.
- A. Correct.
This is correct. Route 53 latency-based routing ensures users are directed to the nearest Region based on latency, and deploying an ALB in each Region provides scalability and load balancing across multiple instances.
- B. Incorrect.
This is incorrect. While a Network Load Balancer (NLB) can handle traffic distribution, it is less suited for web applications requiring Layer 7 (HTTP/HTTPS) features such as SSL termination or path-based routing.
- C. Correct.
This is correct. Enabling HTTPS listeners on ALBs and using SSL/TLS certificates from ACM ensures end-to-end encryption, meeting security requirements.
- D. Incorrect.
This is incorrect. The Classic Load Balancer is legacy and lacks advanced features like path-based routing or WebSocket support, making it unsuitable for modern applications.
- E. Incorrect.
This is incorrect. Weighted routing doesn’t account for latency, which may lead to suboptimal user experiences. Latency-based routing is better for ensuring low-latency connections.