9. Explain How Firewall, DNS, Load Balancers, and Reverse Proxy in Application Deployment 200-901 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a legacy application that does not support health checks. They are deploying it behind a load balancer, but the load balancer cannot detect if the application is down. The operations team wants to ensure that if the application fails, users are redirected to a maintenance page. Which approach should be used?

   • AConfigure the firewall to block traffic to the application when it fails.
   • BUse a reverse proxy in front of the load balancer that checks the backend's HTTP response and serves a maintenance page if the backend returns an error.
   • CConfigure the load balancer to use TCP health checks on the application port.
   • DUse DNS failover with a low TTL to switch to a maintenance server.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An application team deploys a stateful web application on two servers. They need to ensure that a user's session is always handled by the same server. They also want to terminate SSL at the edge. Which configuration should they use?

   • AA firewall that allows HTTPS traffic and forwards it to both servers based on round-robin.
   • BDNS round-robin with two A records pointing to the two servers, and SSL termination on each server.
   • CA load balancer with session affinity (sticky sessions) and SSL termination enabled.
   • DA reverse proxy with caching enabled and SSL termination, but no session affinity.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does a reverse proxy differ from DNS in an application deployment?

   • ADNS caches content, while a reverse proxy encrypts traffic
   • BDNS resolves names to IP addresses, while a reverse proxy forwards client requests to backend servers
   • CDNS filters traffic, while a reverse proxy balances load
   • DDNS distributes traffic, while a reverse proxy resolves names
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is designing a new application deployment. They have the following requirements: (1) users must access the application via a domain name, (2) the application must handle sudden traffic spikes, (3) backend servers must not be directly accessible from the internet, and (4) SSL/TLS termination should be offloaded from backend servers. Which combination of components should be used?

   • ALoad balancer, reverse proxy, and firewall.
   • BDNS, reverse proxy, and firewall.
   • CDNS, load balancer, and firewall.
   • DDNS, load balancer, reverse proxy, and firewall.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard · select all that apply

   A company is deploying a new web application and has the following requirements: (1) users must access the application via a domain name, (2) the application must handle high traffic volumes, (3) backend servers must not be directly accessible from the internet, and (4) SSL/TLS termination should be offloaded from backend servers. Which components are required to meet all these requirements? Select all that apply.

   • ALoad balancer
   • BDNS
   • CVPN
   • DFirewall
   • EReverse proxy
   Check answers Discussion Select an answer first