A company is deploying a new application in the AWS Cloud. The company wants a highly available web server that will sit behind an Elastic Load Balancer. The load balancer will route requests to multiple target groups based on the URL in the request. All traffic must use HTTPS. TLS processing must be offloaded to the load balancer. The web server must know the user’s IP address so that the company can keep accurate logs for security purposes.
Which solution will meet these requirements?
To meet the requirements of having highly available web servers behind an Elastic Load Balancer, routing requests based on the URL, ensuring all traffic uses HTTPS, offloading TLS processing, and having the web server recognize the user's IP address, you would deploy an Application Load Balancer with an HTTPS listener. The Application Load Balancer supports path-based routing, which allows traffic to be forwarded to the correct target group based on the URL. Additionally, the ALB can include the X-Forwarded-For request header with traffic to the targets, allowing the web server to know the user's IP address, fulfilling the security logging requirement.
Answer: A. Deploy an Application Load Balancer with an HTTPS listener. Use path-based routing rules to forward the traffic to the correct target group. Include the X-Forwarded-For request header with traffic to the targets. Explanation: An Application Load Balancer (ALB) with HTTPS and path-based routing rules allows the web server to know the user's IP address through the X-Forwarded-For header, and it handles TLS processing, meeting all the requirements.
A - correct. Here's why: An Application Load Balancer (ALB) can be used to route traffic to multiple target groups based on the URL in the request. The ALB can be configured with an HTTPS listener to ensure all traffic uses HTTPS. TLS processing can be offloaded to the ALB, which reduces the load on the web server. Path-based routing rules can be used to route traffic to the correct target group based on the URL in the request. The X-Forwarded-For request header can be included with traffic to the targets, which will allow the web server to know the user's IP address and keep accurate logs for security purposes.
A should be correct. For B, host routing is based on domain name, it's also could route based on URL. But we don't need listener for each domain.
Hi Everyone, Could you assist with the full version of this question category? Please . I will be writing the exam 3 days from now. <a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="0a6b676b657e6b637d653a324a6d676b636624696567">[email protected]</a>, I will appreciate this kind gesture.
A - correct. Here's why: An Application Load Balancer (ALB) can be used to route traffic to multiple target groups based on the URL in the request. The ALB can be configured with an HTTPS listener to ensure all traffic uses HTTPS. TLS processing can be offloaded to the ALB, which reduces the load on the web server. Path-based routing rules can be used to route traffic to the correct target group based on the URL in the request. The X-Forwarded-For request header can be included with traffic to the targets, which will allow the web server to know the user's IP address and keep accurate logs for security purposes. https://bitly.cx/ExamsTopics
NLB is working on L4 instead of L7 (HTTPS).
A is the correct answer. ALB with HTTPS listener, and X-Forwarded-For is added by default.
I think that It's correct answer is A according to the SPOTO products.
I think that it's correcty answer is A.
ALB: TLS termination, path based listener configuration and X-Forwarded-For request header
https://aws.amazon.com/blogs/networking-and-content-delivery/accessing-private-application-load-balancers-and-instances-through-aws-global-accelerator/
This for Q3
Target group based rule
The correct answer is A. Deploy an Application Load Balancer with an HTTPS listener. Use path-based routing rules to forward the traffic to the correct target group. Include the X-Forwarded-For request header with traffic to the targets.
1 week ago A - correct. Here's why: An Application Load Balancer (ALB) can be used to route traffic to multiple target groups based on the URL in the request. The ALB can be configured with an HTTPS listener to ensure all traffic uses HTTPS. TLS processing can be offloaded to the ALB, which reduces the load on the web server. Path-based routing rules can be used to route traffic to the correct target group based on the URL in the request. The X-Forwarded-For request header can be included with traffic to the targets, which will allow the web server to know the user's IP address and keep accurate logs for security purposes.
A & C both can be correct but the company wants highly available design so C should be correct as it provides zonal isolation. ALB does not support Zonal Isolation for HA.
ALB does not preserve client IP address therefore I believer the answer to be D.
I was incorrect. A is the answer.
A - correct.