ANS-C01 Question 81
Select 3You are designing a multi-region, highly available application hosted on Amazon Elastic Kubernetes Service (Amazon EKS). The application requires low latency for global users and must support secure communication using HTTPS. Additionally, the solution should protect the application from common web attacks. Which combination of AWS services should you use to meet these requirements?
- A
AWS Global Accelerator to route traffic to the closest region and Amazon Certificate Manager (ACM) for SSL/TLS certificates
- B
AWS CloudFront for content delivery and AWS WAF to protect against web attacks
- C
Application Load Balancer (ALB) for distributing traffic to EKS nodes and AWS WAF for web protection
- D
Amazon Route 53 for DNS routing and AWS Global Accelerator for reducing latency
- E
Network Load Balancer (NLB) for distributing traffic and AWS Certificate Manager (ACM) for SSL/TLS certificates
Show answer and explanation
Correct answers: A, B, C
Explanation
To achieve low latency for global users, AWS Global Accelerator and CloudFront can be used to route traffic efficiently and cache content closer to users. Secure communication is ensured using ACM for SSL/TLS certificates. Application Load Balancer (ALB) integrates well with Amazon EKS to distribute traffic and can work with AWS WAF to protect against web attacks. Together, these services provide a highly available, globally optimized, and secure solution for the application.
- A. Correct.
Correct. AWS Global Accelerator provides low-latency routing to the closest application endpoint in a multi-region setup, and ACM can manage SSL/TLS certificates for secure communication.
- B. Correct.
Correct. AWS CloudFront is a global Content Delivery Network (CDN) that can cache content closer to users, improving performance, and AWS WAF can protect against common web attacks.
- C. Correct.
Correct. ALB is commonly used to distribute traffic to Amazon EKS nodes and provides integration with AWS WAF to enhance security.
- D. Incorrect.
Incorrect. While Route 53 can help with DNS routing, it does not directly reduce latency like AWS Global Accelerator does.
- E. Incorrect.
Incorrect. Network Load Balancer (NLB) is generally used for TCP/UDP traffic and does not integrate with AWS WAF or provide full support for HTTPS termination.