Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 587 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 587
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has a three-tier application on AWS that ingests sensor data from its users' devices. The traffic flows through a Network Load Balancer (NLB), then to
Amazon EC2 instances for the web tier, and finally to EC2 instances for the application tier. The application tier makes calls to a database.
What should a solutions architect do to improve the security of the data in transit?

A. Configure a TLS listener. Deploy the server certificate on the NLB.
B. Configure AWS Shield Advanced. Enable AWS WAF on the NLB.
C. Change the load balancer to an Application Load Balancer (ALB). Enable AWS WAF on the ALB.
D. Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances by using AWS Key Management Service (AWS KMS).

Show Suggested Answer

Suggested Answer: A 🗳️

by guptatrng at Sept. 7, 2022, 5:42 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Devsin2000

1 year, 8 months ago

A - Correct B - Wrong because WAF can't be enabled on NLB C- Close but incorrect, because encryption is required. D- incorrect, data in transit needs to secured not at rest

upvoted 1 times

...

rodriiviru

2 years, 8 months ago

Selected Answer: A

You must specify an SSL certificate for a TLS listener. The load balancer uses the certificate to terminate the connection and decrypt requests from clients before routing them to targets. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-listener.html

upvoted 1 times

...