ANS-C01 Question 57
Select 4You are designing a web application that requires high availability, scalability, and secure traffic management. The application is deployed across multiple Availability Zones within a region. To meet these requirements, you must ensure that HTTPS traffic is securely distributed to the backend instances, and that the solution scales automatically based on incoming traffic. Which combination of features and services should you use?
- A
Use an Application Load Balancer (ALB) for HTTPS traffic distribution.
- B
Enable Cross-Zone Load Balancing on the Application Load Balancer.
- C
Set up AWS WAF (Web Application Firewall) to protect against common attack patterns.
- D
Use a Gateway Load Balancer to distribute HTTPS traffic.
- E
Configure Auto Scaling groups for the backend instances.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To meet the requirements of high availability, scalability, and security, this solution combines an Application Load Balancer (ALB) for HTTPS traffic distribution, Cross-Zone Load Balancing for even traffic distribution across Availability Zones, AWS WAF for security, and Auto Scaling groups for backend scalability. A Gateway Load Balancer is not suitable for this scenario as it is not designed for distributing HTTPS traffic to backend instances.
- A. Correct.
Using an Application Load Balancer (ALB) for HTTPS traffic distribution is ideal as it supports HTTPS listeners and provides Layer 7 routing, which is optimized for web applications.
- B. Correct.
Enabling Cross-Zone Load Balancing ensures that traffic is evenly distributed across all backend instances in different Availability Zones, improving availability and resource utilization.
- C. Correct.
AWS WAF can be integrated with an ALB to provide an additional layer of protection against common web-based attacks, enhancing security.
- D. Incorrect.
A Gateway Load Balancer is used for deploying, scaling, and managing third-party virtual appliances (e.g., firewalls), not for HTTPS traffic distribution to backend instances. This option is incorrect for the given scenario.
- E. Correct.
Configuring Auto Scaling groups ensures that the backend instances can scale automatically based on traffic demands, meeting the application's scalability requirements.