ANS-C01 Question #220: Real Exam Question with Answer & Explanation

Question

A company is building an API-based application on AWS and is using a microservices architecture for the design. The company is using a multi-account AWS environment that includes a separate AWS account for each microservice development team. Each team hosts its microservice in its own VPC that contains Amazon EC2 instances behind a Network Load Balancer (NLB). A network engineer needs to use Amazon API Gateway in a shared services account to create an HTTP API to expose these microservices to external applications. The network engineer must ensure that access to the microservices can occur only over a private network. Additionally, the company must be able to control which entities from its internal network can connect to the microservices. In the future, the company will create more microservices that the company must be able to integrate with the application. What is the MOST secure solution that meets these requirements?

Options

• ACreate an Application Load Balancer (ALB) in a VPC in the shared services account. Configure
• BCreate an Application Load Balancer (ALB) in a VPC in the shared services account. Configure
• CConfigure the integration to the API Gateway API by using HTTP-based integration. Connect all
• DConfigure the integration to the API Gateway API by using VPC link integration. Connect all the