Answer-first summary for fast verification
Answer: Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocol listener on port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
To properly redirect HTTP traffic to HTTPS using an Elastic Load Balancing (ELB) setup, you must use an **Application Load Balancer (ALB)**. The ALB needs two listeners: an HTTP listener on port 80 and an HTTPS listener on port 443. The SSL/TLS certificate from AWS Certificate Manager (ACM) is attached to the HTTPS listener on port 443. Finally, a redirect rule is configured on the HTTP listener to forward incoming traffic on port 80 to the HTTPS listener on port 443. Network Load Balancers (NLBs) process TCP/UDP traffic and do not natively support HTTP to HTTPS redirects like ALBs do.
Author: Ritesh Yadav
Ultimate access to all questions.
Question #9 A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancing (ELB) load balancer. The company's security team wants to protect the website by using AWS Certificate Manager (ACM) certificates. The load balancer must automatically redirect any HTTP requests to HTTPS. Which solution will meet these requirements?
A
Create an Application Load Balancer that has one HTTPS listener on port 80. Attach an SSL/TLS certificate to listener port 80. Create a rule to redirect requests from HTTP to HTTPS.
B
Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocol listener on port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
C
Create an Application Load Balancer that has two TCP listeners on port 80 and port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
D
Create a Network Load Balancer that has two TCP listeners on port 80 and port 443. Attach an SSL/TLS certificate to listener port 443. Create a rule to redirect requests from port 80 to port 443.
No comments yet.