Amazon Exam ANS-C01 Topic 5 Question 36 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 36
Topic #: 5

A company has deployed a new web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Enterprise customers from around the world will use the application. Employees of these enterprise customers will connect to the application over HTTPS from office locations.

The company must configure firewalls to allow outbound traffic to only approved IP addresses. The employees of the enterprise customers must be able to access the application with the least amount of latency.

Which change should a network engineer make in the infrastructure to meet these requirements?

ACreate a new Network Load Balancer (NLB). Add the ALB as a target of the NLB.

BCreate a new Amazon CloudFront distribution. Set the ALB as the distribution's origin.

CCreate a new accelerator in AWS Global Accelerator. Add the ALB as an accelerator endpoint.

DCreate a new Amazon Route 53 hosted zone. Create a new record to route traffic to the ALB.

Show Suggested Answer

Suggested Answer: B

Amazon CloudFront is a content delivery network (CDN) that can speed up the delivery of static and dynamic web content, such as images, videos, and APIs2.CloudFront can also provide end-to-end encryption for HTTPS traffic by using SSL certificates from AWS Certificate Manager (ACM) or other sources2.CloudFront can also support session affinity (sticky sessions) with a load balancer-generated cookie or an application-based cookie policy2.

by Virgilio at Sep 18, 2024, 11:56 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jina

2 months ago

Haha, the employees better not try to sneak in a few Netflix sessions during their work hours! Option C seems like the most balanced solution for this use case.

upvoted 0 times

Cletus

1 months ago

Yeah, it's important to prioritize performance for the enterprise customers accessing the application.

upvoted 0 times

...

Alonso

1 months ago

I agree, using AWS Global Accelerator would ensure low latency for the employees.

upvoted 0 times

...

Niesha

1 months ago

Option C seems like the most balanced solution for this use case.

upvoted 0 times

...

Ozell

2 months ago

But wouldn't using AWS Global Accelerator reduce latency for the enterprise customers?

upvoted 0 times

...

Franklyn

2 months ago

I disagree, I believe the answer is D) Create a new Amazon Route 53 hosted zone.

upvoted 0 times

...

Janna

3 months ago

Option B with CloudFront sounds interesting, but I'm not sure if it will provide the same level of control over the firewall rules as the Global Accelerator solution in option C.

upvoted 0 times

Adolph

1 months ago

It's important to consider the specific needs of the enterprise customers when choosing the best solution.

upvoted 0 times

...

Paul

2 months ago

Global Accelerator in option C can provide better control over firewall rules and optimize the routing of traffic.

upvoted 0 times

...

Mila

2 months ago

Option B with CloudFront can help improve latency by caching content closer to the users.

upvoted 0 times

...

Ozell

3 months ago

I think the answer is C) Create a new accelerator in AWS Global Accelerator.

upvoted 0 times

...

Marjory

3 months ago

I think option C is the way to go. Global Accelerator will help reduce latency for the enterprise customers while the firewall rules can be configured to allow only approved IP addresses.

upvoted 0 times