9. Explain How Firewall, DNS, Load Balancers, and Reverse Proxy in Application Deployment 200-901 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A web application is deployed in a private subnet. The only entry point is a reverse proxy that terminates TLS and forwards traffic to the application. The security team wants to ensure that only the reverse proxy can reach the application servers. What should be configured?

   • AA DNS record that points the application's domain to the reverse proxy's IP.
   • BA firewall rule that allows traffic from the reverse proxy's IP address to the application servers on the application port.
   • CA reverse proxy rule that only allows requests from the application's domain.
   • DA load balancer in front of the application servers that only accepts traffic from the reverse proxy.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is migrating an application to a new data center. They want to minimize downtime during the migration. The application is currently accessed via a domain name that resolves to the old data center's load balancer. Which DNS strategy should be used to gradually shift traffic to the new data center?

   • AUse round-robin DNS to alternate between old and new data centers.
   • BUse weighted DNS routing, gradually increasing the weight of the new data center's IP while decreasing the old one.
   • CChange the DNS record to point to the new data center's IP immediately.
   • DSet a very low TTL and then change the DNS record to the new IP.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company has a web application that serves both static content (images, CSS) and dynamic content (API calls). They want to improve performance by caching static content and reducing the load on backend servers. Which configuration should be used?

   • AConfigure a reverse proxy to cache static content and forward dynamic requests to the backend servers.
   • BConfigure DNS to cache static content and resolve dynamic requests.
   • CConfigure a firewall to cache static content and allow dynamic requests.
   • DConfigure a load balancer to cache static content and distribute dynamic requests.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A web application is deployed behind a reverse proxy. The application team wants to reduce the load on the backend servers by serving frequently requested images and static files from a cache. They also want to hide the backend server's IP address from clients. Which component provides both of these functions?

   • AA DNS server that caches DNS responses and hides the backend IP.
   • BA reverse proxy with caching enabled and configured to forward requests to the backend servers.
   • CA load balancer that caches static content and hides the backend IP.
   • DA firewall that caches static content and hides the backend IP.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company runs a global web application with multiple regional deployments. Each region has its own load balancer. The operations team wants to direct users to the nearest regional deployment to reduce latency. Which DNS feature should they use?

   • AA single A record that points to the primary region's load balancer IP.
   • BA CNAME record that points to a load balancer that automatically redirects to the nearest region.
   • CMultiple A records with the same name, each pointing to a different regional load balancer IP, and rely on round-robin DNS.
   • DA DNS service that supports geo-based routing policies, such as a location-based DNS record set.
   Reveal Solution Discussion Select an answer first