A user has configured an HTTPS listener on an ELB. The user has not configured any security policy which can help to negotiate SSL between the client and ELB. What will ELB do in this scenario?
A.
By default, ELB will select the first version of the security policy
B.
By default, ELB will select the latest version of the policy
C.
ELB creation will fail without a security policy
D.
It is not required to have a security policy since SSL is already installed
Suggested Answer:B🗳️
Elastic Load Balancing uses a Secure Socket Layer (SSL. negotiation configuration which is known as a Security Policy. It is used to negotiate the SSL connections between a client and the load balancer. If the user has created an HTTPS/SSL listener without associating any security policy, Elastic Load Balancing will, by default, associate the latest version of the ELBSecurityPolicy-YYYY-MM with the load balancer.
When an Elastic Load Balancer (ELB) HTTPS listener is configured without specifying a security policy, the ELB will automatically select the latest available version of the SSL/TLS policy that is supported by the ELB platform. This policy determines the protocols and encryption algorithms that will be used to negotiate the SSL/TLS connection between the client and the ELB.
It's important to note that the choice of security policy can affect the compatibility of clients connecting to the ELB. Different policies support different versions of SSL/TLS and encryption algorithms, and some older clients might not be compatible with the latest policies due to security vulnerabilities.
While the ELB can select a default policy, it's generally recommended to review and select an appropriate security policy that meets your application's security and compatibility requirements.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
albert_kuo
8 months, 3 weeks ago