SOA-C02 Question 246
Select 3Your company has launched a new web application hosted on an Amazon EC2 instance behind an Application Load Balancer (ALB). The application needs to be accessible via a custom domain (e.g., www.example.com). You are tasked with configuring DNS and improving the application's performance for global users. Which combination of steps should you take to achieve this?
- A
Create a CNAME record in Amazon Route 53 pointing www.example.com to the ALB's DNS name.
- B
Enable CloudFront, configure it to use the ALB as the origin, and create a CNAME record in Route 53 pointing www.example.com to the CloudFront distribution.
- C
Create an A record in Amazon Route 53 pointing www.example.com to the Elastic IP address of the EC2 instance.
- D
Enable AWS Global Accelerator and point the custom domain to the Global Accelerator's DNS name in Route 53.
- E
Associate an ACM (AWS Certificate Manager) certificate with the ALB to enable HTTPS for www.example.com.
Show answer and explanation
Correct answers: A, B, E
Explanation
To configure the custom domain and optimize performance, you must create a DNS record (CNAME) in Route 53 pointing to the ALB or CloudFront distribution. CloudFront enhances performance for global users, while an ACM certificate enables HTTPS for secure communication. Using an A record or Global Accelerator is unnecessary in this specific scenario.
- A. Correct.
Correct: A CNAME record in Route 53 pointing to the ALB's DNS name ensures the custom domain resolves to the ALB, allowing traffic to reach the application.
- B. Correct.
Correct: Using CloudFront with the ALB as the origin improves performance for global users by caching content at edge locations. The CNAME record ensures the custom domain resolves to the CloudFront distribution.
- C. Incorrect.
Incorrect: An A record cannot point to an ALB or directly to an EC2 instance without an Elastic IP. Since the instance is behind an ALB, this is not applicable.
- D. Incorrect.
Incorrect: AWS Global Accelerator is not required for this scenario as CloudFront already optimizes performance for global users.
- E. Correct.
Correct: Associating an ACM certificate with the ALB ensures HTTPS traffic is supported, providing secure access to the application via the custom domain.