AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 122

Question

A company is deploying a new stateless web application on AWS. The web application will run on Amazon EC2 instances in private subnets behind an Application Load Balancer. The EC2 instances are in an Auto Scaling group. The web application has a stateful management application for administration that will run on EC2 instances that are in a separate Auto Scaling group. The company wants to access the management application by using the same URL as the web application, with a path prefix of/management. The protocol, hostname, and port number must be the same for the web application and the management application. Access to the management application must be restricted to the company's on-premises IP address space. An SSL/TLS certificate from AWS Certificate Manager (ACM) will protect the web application. Which combination of steps should a network engineer take to meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, E. The correct answer is A, E. Option A: Insert a rule for the load balancer HTTPS listener. Configure the rule to check the path-pattern condition type for the /management prefix and to check the source-ip condition type for the on-premises IP address space... Option E: Forward all requests to the web application target group. Edit the web application target group and disable stickiness. A load balancer distributes traffic across targets in multiple AZs for availability and scale. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 122