Task 1.3: Design Solutions That Integrate Load Balancing to Meet High Availability, Scalability, and Security Requirements ANS-C01 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which AWS service can be integrated with an Application Load Balancer to filter and block malicious web requests based on rules?

   • AAWS Shield Advanced
   • BAWS Network Firewall
   • CAmazon GuardDuty
   • DAWS WAF
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of SSL/TLS termination on a load balancer?

   • ATo replace the need for security groups on the load balancer
   • BTo block all HTTPS traffic from reaching the load balancer
   • CTo encrypt traffic between the load balancer and targets
   • DTo decrypt incoming HTTPS traffic at the load balancer and forward plaintext HTTP to targets
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has an on-premises data center and an AWS VPC connected via a Direct Connect connection. The company runs a web application on EC2 instances in the VPC behind an Application Load Balancer. The company wants to distribute traffic between the on-premises servers and the AWS instances for load balancing and failover. Which solution should be used?

   • AUse Route 53 weighted routing between the on-premises servers and the ALB
   • BUse a Network Load Balancer with on-premises servers as targets
   • CRegister the on-premises servers as targets in the ALB target group using their IP addresses
   • DSet up a VPN connection and use a Classic Load Balancer with on-premises targets
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company operates a global web application with workloads in two AWS regions. The application is fronted by an Application Load Balancer in each region. The company wants to route users to the region with the lowest latency and automatically fail over to the other region if one region becomes unhealthy. Which Route 53 routing policy should be used?

   • AFailover routing with primary and secondary ALB endpoints
   • BLatency-based routing with health checks on the ALB endpoints
   • CWeighted routing with equal weights and health checks
   • DGeolocation routing with health checks
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company runs a web application on EC2 instances in two Availability Zones behind an Application Load Balancer. The company has enabled cross-zone load balancing, but notices that the instances in one AZ are receiving more traffic than the other. The company wants to ensure that traffic is distributed evenly across all instances. Which additional configuration should be made?

   • AEnsure that the target group has an equal number of instances in each Availability Zone
   • BUse a Network Load Balancer instead of an ALB
   • CDisable cross-zone load balancing and rely on round-robin routing
   • DIncrease the health check interval to reduce the number of unhealthy instances
   Reveal Solution Discussion Select an answer first