Answer-first summary for fast verification
Answer: Use ACM to import the SSL certificate and set up an Application Load Balancer with an HTTPS listener utilizing the ACM certificate.
The correct answer is D. By importing the SSL certificate into AWS Certificate Manager (ACM) and creating an Application Load Balancer with an HTTPS listener that uses the SSL certificate from ACM, the SSL termination is offloaded from the EC2 instances to the load balancer. This significantly reduces the compute burden on the web servers, improving their performance. Options A, B, and C do not offload the SSL termination task and therefore would not address the compute capacity issue effectively.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A company's dynamic web application, hosted on two EC2 instances, is experiencing performance issues due to high traffic causing SSL encryption/decryption to max out compute capacity. How can a solutions architect improve performance?
A
Generate a new ACM SSL certificate and deploy it on each EC2 instance.
B
Move the SSL certificate to an S3 bucket and adjust EC2 instances for bucket-referenced SSL termination.
C
Add a proxy server EC2 instance, transfer the SSL certificate there, and route traffic to the primary instances.
D
Use ACM to import the SSL certificate and set up an Application Load Balancer with an HTTPS listener utilizing the ACM certificate.