AWS Certified Advanced Networking - Specialty
Get started today
Ultimate access to all questions.
A company has deployed a new web application on AWS using Amazon ECS on AWS Fargate, with an Application Load Balancer (ALB) in the us-east-1 Region. The application uses Amazon Route 53 for DNS management and primarily serves static images and files that are rarely updated. Most user traffic originates from the United States, with some from Canada and Europe.
A network engineer must design a solution to minimize latency for end users at the lowest cost while ensuring all traffic remains encrypted in transit until it reaches the ALB.
Which solution meets these requirements?
A company has deployed a new web application on AWS using Amazon ECS on AWS Fargate, with an Application Load Balancer (ALB) in the us-east-1 Region. The application uses Amazon Route 53 for DNS management and primarily serves static images and files that are rarely updated. Most user traffic originates from the United States, with some from Canada and Europe.
A network engineer must design a solution to minimize latency for end users at the lowest cost while ensuring all traffic remains encrypted in transit until it reaches the ALB.
Which solution meets these requirements?
Explanation:
To reduce latency for end users at the lowest cost while ensuring all traffic is encrypted in transit until it reaches the ALB, the best solution involves leveraging Amazon CloudFront. CloudFront is a content delivery network (CDN) that caches content at edge locations close to users, reducing latency. It also supports HTTPS, ensuring traffic is encrypted. Option C is the correct choice because it configures the ALB with a secure HTTPS listener, sets up a CloudFront distribution with the ALB as the origin, uses an SSL certificate for the CloudFront distribution, redirects HTTP to HTTPS, and routes the custom domain name to the CloudFront distribution via an alias record in Route 53. This setup ensures that static content is served from the nearest CloudFront edge location, reducing latency for users in the United States, Canada, and Europe, while maintaining secure, encrypted connections. Options A and D involve AWS Global Accelerator, which is more suited for improving availability and performance of applications that require global low latency and high availability, not specifically for caching static content. Option B does not redirect HTTP to HTTPS, which is a requirement for ensuring all traffic is encrypted in transit.