SAP-C02 · Question #185
A company wants to deploy an API to AWS. The company plans to run the API on AWS Fargate behind a load balancer. The API requires the use of header-based routing and must be accessible from on…
The correct answer is B. Create two new /27 subnets. Since the security group will permit /27 CIDR ranges to be added to the allow list, we do not need to know what the actual IPs are of the ALBs (as they are dynamic). ALB is required as it operates at L7, needed for head-based routing.
Question
A company wants to deploy an API to AWS. The company plans to run the API on AWS Fargate behind a load balancer. The API requires the use of header-based routing and must be accessible from on- premises networks through an AWS Direct Connect connection and a private VIF. The company needs to add the client IP addresses that connect to the API to an allow list in AWS. The company also needs to add the IP addresses of the API to the allow list. The company's security team will allow /27 CIDR ranges to be added to the allow list. The solution must minimize complexity and operational overhead. Which solution will meet these requirements?
Options
- ACreate a new Network Load Balancer (NLB) in the same subnets as the Fargate task
- BCreate two new /27 subnets.
- CCreate two new /27 subnets.
- DCreate a new Application Load Balancer (ALB) in the same subnets as the Fargate task
How the community answered
(57 responses)- A9% (5)
- B72% (41)
- C4% (2)
- D16% (9)
Explanation
Since the security group will permit /27 CIDR ranges to be added to the allow list, we do not need to know what the actual IPs are of the ALBs (as they are dynamic). ALB is required as it operates at L7, needed for head-based routing.
Community Discussion
No community discussion yet for this question.