nerdexam
Amazon

ANS-C01 · Question #12

An ecommerce company is hosting a web application on Amazon EC2 instances to handle continuously changing customer demand. The EC2 instances are part of an Auto Scaling group. The company wants to…

The correct answer is C. Create a Network Load Balancer (NLB). Add a TCP listener to the NLB. Configure the Auto. If you need to pass encrypted traffic to the targets without the load balancer decrypting it, create a TCP listener on port 443 instead of creating a TLS listener. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html

Submitted by naveen.iyer· Mar 6, 2026Security, Compliance, and Governance for AI Solutions

Question

An ecommerce company is hosting a web application on Amazon EC2 instances to handle continuously changing customer demand. The EC2 instances are part of an Auto Scaling group. The company wants to implement a solution to distribute traffic from customers to the EC2 instances. The company must encrypt all traffic at all stages between the customers and the application servers. No decryption at intermediate points is allowed. Which solution will meet these requirements?

Options

  • ACreate an Application Load Balancer (ALB). Add an HTTPS listener to the ALB. Configure the
  • BCreate an Amazon CloudFront distribution. Configure the distribution with a custom SSL/TLS
  • CCreate a Network Load Balancer (NLB). Add a TCP listener to the NLB. Configure the Auto
  • DCreate a Gateway Load Balancer (GLB). Configure the Auto Scaling group to register instances

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    19% (4)
  • C
    62% (13)
  • D
    14% (3)

Explanation

If you need to pass encrypted traffic to the targets without the load balancer decrypting it, create a TCP listener on port 443 instead of creating a TLS listener. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html

Topics

#load balancer#end-to-end encryption#SSL/TLS#EC2 Auto Scaling

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice