SAA-C03 · Question #532
A company runs a web application on Amazon EC2 instances in an Auto Scaling group that has a target group. The company designed the application to work with session affinity (sticky sessions) for a…
The correct answer is C. Create a public Application Load Balancer. Specify the application target group. E. Create a web ACL in AWS WAF. Associate the web ACL with the endpoint. The Application Load Balancer (ALB) supports sticky sessions (session affinity) using application cookies. AWS WAF integrates natively with ALB to provide Layer 7 protection at the same "You can enable sticky sessions for your Application Load Balancer target groups to ensure…
Question
A company runs a web application on Amazon EC2 instances in an Auto Scaling group that has a target group. The company designed the application to work with session affinity (sticky sessions) for a better user experience. The application must be available publicly over the internet as an endpoint. A WAF must be applied to the endpoint for additional security. Session affinity (sticky sessions) must be configured on the endpoint. Which combination of steps will meet these requirements? (Choose two.)
Options
- ACreate a public Network Load Balancer. Specify the application target group.
- BCreate a Gateway Load Balancer. Specify the application target group.
- CCreate a public Application Load Balancer. Specify the application target group.
- DCreate a second target group. Add Elastic IP addresses to the EC2 instances.
- ECreate a web ACL in AWS WAF. Associate the web ACL with the endpoint.
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C83% (19)
- D9% (2)
Explanation
The Application Load Balancer (ALB) supports sticky sessions (session affinity) using application cookies. AWS WAF integrates natively with ALB to provide Layer 7 protection at the same "You can enable sticky sessions for your Application Load Balancer target groups to ensure that a user's requests are consistently routed to the same target. AWS WAF integrates with Application Load Balancer to protect your web applications from common exploits." Why C and E are correct: C: ALB operates at Layer 7 (HTTP/HTTPS), supports sticky sessions, and can serve as a public E: AWS WAF can be directly associated with the ALB to inspect traffic and enforce rules.Together, they fulfill both the security and session affinity requirements. Why others are incorrect: A: Network Load Balancer doesn't support session affinity. B: Gateway Load Balancer is used for virtual appliances, not web applications. D: Using EIPs bypasses load balancing and WAF integration.
Community Discussion
No community discussion yet for this question.