SCS-C02 · Question #174
An ecommerce company is developing new architecture for an application release. The company needs to implement TLS for incoming traffic to the application. Traffic for the application will originate…
The correct answer is A. Create a public Application Load Balancer. Create two listeners: one listener on port 80 and one. The security engineer should create a public Application Load Balancer, create two listeners (one on port 80 and one on port 443), create one target group, and create a rule to forward traffic from port 80 to the listener on port 443. Then, they should provision a public TLS…
Question
An ecommerce company is developing new architecture for an application release. The company needs to implement TLS for incoming traffic to the application. Traffic for the application will originate from the internet. TLS does not have to be implemented in an end-to-end configuration because the company is concerned about impacts on performance The incoming traffic types will be HTTP and HTTPS The application uses ports 80 and 443. What should a security engineer do to meet these requirements?
Options
- ACreate a public Application Load Balancer. Create two listeners: one listener on port 80 and one
- BCreate a public Application Load Balancer. Create two listeners one listener on port 80 and one
- CCreate a public Network Load Balancer. Create two listeners one listener on port 80 and one
- DCreate a public Network Load Balancer. Create a listener on port 443. Create one target group.
How the community answered
(32 responses)- A75% (24)
- B13% (4)
- C3% (1)
- D9% (3)
Explanation
The security engineer should create a public Application Load Balancer, create two listeners (one on port 80 and one on port 443), create one target group, and create a rule to forward traffic from port 80 to the listener on port 443. Then, they should provision a public TLS certificate in AWS Certificate Manager (ACM) and attach the certificate to the listener on port 443. This setup will implement TLS for incoming traffic to the application, without requiring an end-to-end
Topics
Community Discussion
No community discussion yet for this question.