Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 973 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 973
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company is designing a web application with an internet-facing Application Load Balancer (ALB).

The company needs the ALB to receive HTTPS web traffic from the public internet. The ALB must send only HTTPS traffic to the web application servers hosted on the Amazon EC2 instances on port 443. The ALB must perform a health check of the web application servers over HTTPS on port 8443.

Which combination of configurations of the security group that is associated with the ALB will meet these requirements? (Choose three.)

A. Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443.
B. Allow all outbound traffic to 0.0.0.0/0 for port 443.
C. Allow HTTPS outbound traffic to the web application instances for port 443.
D. Allow HTTPS inbound traffic from the web application instances for port 443.
E. Allow HTTPS outbound traffic to the web application instances for the health check on port 8443.
F. Allow HTTPS inbound traffic from the web application instances for the health check on port 8443.

Show Suggested Answer

Suggested Answer: ACE 🗳️

by [deleted] at Aug. 19, 2024, 5:31 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

spoved

8 months, 3 weeks ago

Selected Answer: ACE

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-update-security-groups.html The following rules are recommended for an internet-facing load balancer.

upvoted 4 times

...

JoeTromundo

8 months, 3 weeks ago

Selected Answer: ACE

This question is poorly worded: assuming that, by default in security groups, all OUTBOUND connections are ALLOWE and all INBOUND connections are DENIED, options C and E would not even need to be configured. What would be needed is to create a security group for the EC2 instances allowing INBOUND connections from the ALB security group to the EC2 instances security group on ports 443 and 8443.

upvoted 3 times

...

dhewa

10 months ago

Selected Answer: ACE

A. This allows the ALB to receive HTTPS traffic from the public internet. C. This ensures that the ALB can send HTTPS traffic to the web application servers. E. This allows the ALB to perform health checks on the web application servers over HTTPS on port 8443.

upvoted 4 times

...

dhewa

10 months ago

Selected Answer: ADE

upvoted 1 times

...

aragon_saa

10 months ago

Selected Answer: ACE

Answer is ACE

upvoted 2 times

...

[Removed]

10 months ago

Selected Answer: ACE

A. Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443. This allows the ALB to receive HTTPS traffic from the public internet on port 443. C. Allow HTTPS outbound traffic to the web application instances for port 443. This allows the ALB to forward HTTPS traffic to the web application servers on port 443. E. Allow HTTPS outbound traffic to the web application instances for the health check on port 8443. This allows the ALB to perform health checks on the web application servers over HTTPS on port 8443.

upvoted 3 times

...