ANS-C01 · Question #3
A company has developed an application on AWS that will track inventory levels of vending machines and initiate the restocking process automatically. The company plans to integrate this application…
The correct answer is A. Configure the ALB in a private subnet of the VPC. Attach an internet gateway without adding. When you add an internal Application Load Balancer or an Amazon EC2 instance endpoint in AWS Global Accelerator, you enable internet traffic to flow directly to and from the endpoint in Virtual Private Clouds (VPCs) by targeting it in a private subnet. The VPC that contains the…
Question
A company has developed an application on AWS that will track inventory levels of vending machines and initiate the restocking process automatically. The company plans to integrate this application with vending machines and deploy the vending machines in several markets around the world. The application resides in a VPC in the us-east-1 Region. The application consists of an Amazon Elastic Container Service (Amazon ECS) cluster behind an Application Load Balancer (ALB). The communication from the vending machines to the application happens over HTTPS. The company is planning to use an AWS Global Accelerator accelerator and configure static IP addresses of the accelerator in the vending machines for application endpoint access. The application must be accessible only through the accelerator and not through a direct connection over the internet to the ALB endpoint. Which solution will meet these requirements?
Options
- AConfigure the ALB in a private subnet of the VPC. Attach an internet gateway without adding
- BConfigure the ALB in a private subnet of the VPC. Configure the accelerator with endpoint groups
- CConfigure the ALB in a public subnet of the VPAttach an internet gateway. Add routes in the
- DConfigure the ALB in a private subnet of the VPC. Attach an internet gateway. Add routes in the
How the community answered
(55 responses)- A64% (35)
- B5% (3)
- C20% (11)
- D11% (6)
Explanation
When you add an internal Application Load Balancer or an Amazon EC2 instance endpoint in AWS Global Accelerator, you enable internet traffic to flow directly to and from the endpoint in Virtual Private Clouds (VPCs) by targeting it in a private subnet. The VPC that contains the load balancer or EC2 instance must have an internet gateway attached to it, to indicate that the VPC accepts internet traffic. However, you don't need public IP addresses on the load balancer or EC2 instance. You also don't need an associated internet gateway route for the subnet. https://docs.aws.amazon.com/global-accelerator/latest/dg/secure-vpc-connections.html
Topics
Community Discussion
No community discussion yet for this question.