Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 201 discussion

Refer "https://www.examtopics.com/discussions/amazon/view/67636-exam-aws-certified-solutions-architect-associate-saa-c02/' and https://www.examtopics.com/discussions/amazon/view/29771-exam-aws-certified-solutions-architect-associate-saa-c02/.. same question A is the answer but where are all the comments gone..why same question has different links....

Option C having creating an A-record in Route53 is part of the overall steps to return a DNS resolved EIP (static public IP address) to the clients. But the ELB (NLB particularly) must resume a static public IP address 1st. Hence, option A is the ultimate correct answer.

A is the answer

A - correct (Static ip can thereafter be used for client whitelisting) Using a Network Load Balancer instead of a Classic Load Balancer has the following benefits: Support for static IP addresses for the load balancer. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html

I think this has to do with "Preserve source IP address", so I stick with the letter A.

IP addresses whitelisted on their firewalls = network load balancer

this question, the setup around the question does not make any sense to me...why would you have something like that in real life.

UDP TCP (layer 4)=NLB (network load balancer)

Network Load Balancers, the load balancer node that receives the connection uses the following process: 1.Selects a target from the target group for the default rule using a flow hash algorithm. It bases the algorithm on: * The protocol * The source IP address and source port * The destination IP address and destination port * The TCP sequence number 2.Routes each individual TCP connection to a single target for the life of the connection. The TCP connections from a client have different source ports and sequence numbers, and can be routed to different targets.

A should be correct as NLB is for IP.

C seems correct.

C - Route53 DNS -> ELB

C for sure, most of modern firewalls should be able to use fqdn within ACL, so an A record pointing to LB should meet their requirement