ANS-C01 Question 82
Select 3A company is deploying a highly available web application on AWS using an Application Load Balancer (ALB). They want to improve global user performance, protect the application from common web exploits, and ensure secure communication using HTTPS. Which combination of services and configurations should they use to meet these requirements?
- A
Use AWS Global Accelerator to route traffic to the ALB for improved global performance.
- B
Integrate AWS WAF with the ALB to block malicious traffic and protect against common web exploits.
- C
Use Amazon Route 53 to configure latency-based routing to the ALB.
- D
Obtain an SSL/TLS certificate from AWS Certificate Manager (ACM) and associate it with the ALB to enable HTTPS.
- E
Deploy Amazon CloudFront in front of the ALB to cache content for better performance.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the requirements of improving global performance, protecting against web exploits, and ensuring secure HTTPS communication, the company should use AWS Global Accelerator for optimal routing, AWS WAF for web application protection, and AWS Certificate Manager (ACM) to enable HTTPS on the ALB. While Amazon Route 53 and CloudFront are valuable services, they are not required in this specific setup as Global Accelerator and the ALB already handle performance and security effectively.
- A. Correct.
Correct. AWS Global Accelerator improves global performance by directing users to the optimal AWS endpoint (in this case, the ALB).
- B. Correct.
Correct. AWS WAF can be integrated with the ALB to provide protection against common web exploits, such as SQL injection and cross-site scripting.
- C. Incorrect.
Incorrect. While Amazon Route 53 can provide latency-based routing, it is not required in this scenario because Global Accelerator already optimizes routing for performance.
- D. Correct.
Correct. AWS Certificate Manager (ACM) simplifies the process of obtaining and managing SSL/TLS certificates, which are required to enable HTTPS on the ALB.
- E. Incorrect.
Incorrect. Amazon CloudFront is primarily used for content delivery and caching, but it is not necessary for this specific scenario where Global Accelerator and ALB are already improving performance and security.