DOP-C02 · Question #84
A DevOps engineer is creating an AWS CloudFormation template to deploy a web service. The web service will run on Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB)…
The correct answer is D. Add an IPv6 CIDR block to the VPC and subnets for the ALB. Create a listener on port 443. and. To support IPv6, configure your Application Load Balancers or Network Load Balancers with the “dualstack” IP address type. This means that clients can communicate with the load balancers using both IPv4 and IPv6 addresses. In a dual-stack IP address type, the DNS name of the…
Question
A DevOps engineer is creating an AWS CloudFormation template to deploy a web service. The web service will run on Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB). The DevOps engineer must ensure that the service can accept requests from clients that have IPv6 addresses. What should the DevOps engineer do with the CloudFormation template so that IPv6 clients can access the web service?
Options
- AAdd an IPv6 CIDR block to the VPC and the private subnet for the EC2 instances. Create route
- BAssign each EC2 instance an IPv6 Elastic IP address. Create a target group, and add the EC2
- CReplace the ALB with a Network Load Balancer (NLB). Add an IPv6 CIDR block to the VPC and
- DAdd an IPv6 CIDR block to the VPC and subnets for the ALB. Create a listener on port 443. and
How the community answered
(23 responses)- A9% (2)
- B17% (4)
- C4% (1)
- D70% (16)
Explanation
To support IPv6, configure your Application Load Balancers or Network Load Balancers with the “dualstack” IP address type. This means that clients can communicate with the load balancers using both IPv4 and IPv6 addresses. In a dual-stack IP address type, the DNS name of the load balancer provides both IPv4 and IPv6 addresses, and creates A and AAAA records respectively. https://docs.aws.amazon.com/whitepapers/latest/ipv6-on-aws/scaling-the-dual-stack-network- design-in-aws.html
Topics
Community Discussion
No community discussion yet for this question.