nerdexam
Amazon

ANS-C01 · Question #102

A company is migrating an existing application to a new AWS account. The company will deploy the application in a single AWS Region by using one VPC and multiple Availability Zones. The application…

The correct answer is A. Create a Network Load Balancer. Create a target group. Set the protocol to TCP and the port to. If you need to pass encrypted traffic to targets without the load balancer decrypting it, you can create a Network Load Balancer or Classic Load Balancer with a TCP listener on port 443.

Submitted by valeria.br· Mar 6, 2026Network Design

Question

A company is migrating an existing application to a new AWS account. The company will deploy the application in a single AWS Region by using one VPC and multiple Availability Zones. The application will run on Amazon EC2 instances. Each Availability Zone will have several EC2 instances. The EC2 instances will be deployed in private subnets. The company's clients will connect to the application by using a web browser with the HTTPS protocol. Inbound connections must be distributed across the Availability Zones and EC2 instances. All connections from the same client session must be connected to the same EC2 instance. The company must provide end-to-end encryption for all connections between the clients and the application by using the application SSL certificate. Which solution will meet these requirements?

Options

  • ACreate a Network Load Balancer. Create a target group. Set the protocol to TCP and the port to
  • BCreate an Application Load Balancer. Create a target group. Set the protocol to HTTP and the
  • CCreate a Network Load Balancer. Create a target group. Set the protocol to TLS and the port to
  • DCreate an Application Load Balancer. Create a target group. Set the protocol to HTTPS and the

How the community answered

(59 responses)
  • A
    69% (41)
  • B
    8% (5)
  • C
    17% (10)
  • D
    5% (3)

Explanation

If you need to pass encrypted traffic to targets without the load balancer decrypting it, you can create a Network Load Balancer or Classic Load Balancer with a TCP listener on port 443.

Topics

#Application Load Balancer#Network Load Balancer#session stickiness#TLS termination

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ANS-C01 Practice