A company is deploying a new stateless web application on AWS, hosted on Amazon EC2 instances in private subnets behind an Application Load Balancer. The EC2 instances are part of an Auto Scaling group. A stateful management application for administration will run on separate EC2 instances in a different Auto Scaling group. The company intends to access the management application using the same URL as the web application, with a `/management` path prefix, while maintaining identical protocol, hostname, and port number for both applications. Access to the management application must be limited to the company's on-premises IP address range, and the web application will be secured with an SSL/TLS certificate from AWS Certificate Manager (ACM). Which two steps should a network engineer implement to fulfill these requirements? | AWS Certified Advanced Networking - Specialty Quiz