Differentiate the Load Balancer Types and Methods ECS-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   What is a potential security consideration when SSL termination is performed at the load balancer?

   • AThe load balancer cannot inspect the traffic
   • BTraffic between the load balancer and backend servers is often unencrypted
   • CIt increases the attack surface on backend servers
   • DBackend servers must handle all encryption
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An ECS deployment uses a load balancer to distribute traffic to multiple storage nodes. The load balancer is configured with a health check that sends a TCP connection request to each node every 10 seconds. If a node fails to respond within 5 seconds, it is marked unhealthy and removed from rotation. However, the storage nodes occasionally experience brief network pauses that last up to 8 seconds. What is the most likely impact of this configuration?

   • AThe load balancer will automatically adjust the health check interval to match the network conditions
   • BHealth checks will pass because TCP connections are established quickly
   • CThe load balancer will continue to send traffic to the node during the pause, but the node will drop the requests
   • DNodes will be incorrectly marked unhealthy during brief pauses, causing unnecessary failover
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   Which deployment scenario involves placing a load balancer between application servers and backend services, such as databases or storage, to distribute internal traffic and improve performance?

   • AFront-end load balancing
   • BGlobal load balancing
   • CBack-end load balancing
   • DDNS load balancing
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   An ECS-based application uses a load balancer to distribute traffic across multiple web servers. The application requires session persistence, but the load balancer is currently configured with least connections and no persistence. The operations team is considering enabling IP hash persistence. However, many users access the application through a corporate proxy, so all users appear to come from the same source IP address. What is the most likely impact of enabling IP hash persistence in this scenario?

   • AUsers will be evenly distributed because the load balancer uses the destination IP
   • BAll users will be sent to the same web server, causing uneven load distribution
   • CThe load balancer will automatically switch to round robin to avoid uneven distribution
   • DSession persistence will work correctly because the proxy IP is consistent
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A company is deploying ECS to serve a web application that requires both high availability and the ability to route requests based on the HTTP method (GET vs POST). The security team requires that TLS be terminated at the load balancer to offload backend CPU. The operations team wants to minimize the number of load balancer components. Which approach best meets all requirements?

   • AUse a Layer 4 load balancer with TCP pass-through and a separate Layer 7 load balancer
   • BUse a Layer 7 load balancer with TCP pass-through
   • CUse a single Layer 7 load balancer with SSL termination and health checks
   • DUse a Layer 4 load balancer for SSL termination and a separate Layer 7 load balancer for routing
   Reveal Solution Discussion Select an answer first