Topic 1 Question 973

AWS Certified Solutions Architect - Associate

Topic 1 Question 973
A company is designing a web application with an internet-facing Application Load Balancer (ALB).

The company needs the ALB to receive HTTPS web traffic from the public internet. The ALB must send only HTTPS traffic to the web application servers hosted on the Amazon EC2 instances on port 443. The ALB must perform a health check of the web application servers over HTTPS on port 8443.

Which combination of configurations of the security group that is associated with the ALB will meet these requirements?

3 つ選択
- Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443.
- Allow all outbound traffic to 0.0.0.0/0 for port 443.
- Allow HTTPS outbound traffic to the web application instances for port 443.
- Allow HTTPS inbound traffic from the web application instances for port 443.
- Allow HTTPS outbound traffic to the web application instances for the health check on port 8443.
- Allow HTTPS inbound traffic from the web application instances for the health check on port 8443.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: ACE
  A. This allows the ALB to receive HTTPS traffic from the public internet. C. This ensures that the ALB can send HTTPS traffic to the web application servers. E. This allows the ALB to perform health checks on the web application servers over HTTPS on port 8443.
  
  👍 4
  dhewa2024/08/19
- 正解だと思う選択肢: ACE
  A. Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443.
  
  This allows the ALB to receive HTTPS traffic from the public internet on port 443. C. Allow HTTPS outbound traffic to the web application instances for port 443.
  
  This allows the ALB to forward HTTPS traffic to the web application servers on port 443. E. Allow HTTPS outbound traffic to the web application instances for the health check on port 8443.
  
  This allows the ALB to perform health checks on the web application servers over HTTPS on port 8443.
  
  👍 3
  [Removed]2024/08/19
- 正解だと思う選択肢: ACE
  This question is poorly worded: assuming that, by default in security groups, all OUTBOUND connections are ALLOWE and all INBOUND connections are DENIED, options C and E would not even need to be configured. What would be needed is to create a security group for the EC2 instances allowing INBOUND connections from the ALB security group to the EC2 instances security group on ports 443 and 8443.
  
  👍 3
  JoeTromundo2024/09/26
シャッフルモード

ユーザの投票

コメント(6)