SAA-C03 · Question #348
A solutions architect is creating a data reporting application that will send traffic through third- party network firewalls in an AWS security account. The firewalls and application servers must be…
The correct answer is C. Use a Gateway Load Balancer (GWLB) for the firewalls. Use an Application Load Balancer (ALB). Since the application uses long-lived TCP connections and must remain idle for up to 1 hour without timeout, all components involved in the connection path (ALB, GWLB, and firewall) must have their idle timeout values configured to at least 1 hour. Gateway Load Balancer…
Question
A solutions architect is creating a data reporting application that will send traffic through third- party network firewalls in an AWS security account. The firewalls and application servers must be load balanced. The application uses TCP connections to generate reports. The reports can run for several hours and can be idle for up to 1 hour. The reports must not time out during an idle period. Which solution will meet these requirements?
Options
- AUse a Gateway Load Balancer (GWLB) for the firewalls. Use an Application Load Balancer (ALB)
- BUse a single firewall in the security account. Use an Application Load Balancer (ALB) for the
- CUse a Gateway Load Balancer (GWLB) for the firewalls. Use an Application Load Balancer (ALB)
- Ddoesn't solve idle timeout issues. Therefore, C provides a resilient and complete configuration.
How the community answered
(19 responses)- A16% (3)
- B11% (2)
- C42% (8)
- D32% (6)
Explanation
Since the application uses long-lived TCP connections and must remain idle for up to 1 hour without timeout, all components involved in the connection path (ALB, GWLB, and firewall) must have their idle timeout values configured to at least 1 hour. Gateway Load Balancer supports transparent insertion of firewalls, and configuring consistent idle timeouts ensures connections don't drop mid-session. Using just one firewall (option B) introduces a single point of failure. Increasing capacity (option
Community Discussion
No community discussion yet for this question.