Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 2 discussion

A - correct. Here's why: An Application Load Balancer (ALB) can be used to route traffic to multiple target groups based on the URL in the request. The ALB can be configured with an HTTPS listener to ensure all traffic uses HTTPS. TLS processing can be offloaded to the ALB, which reduces the load on the web server. Path-based routing rules can be used to route traffic to the correct target group based on the URL in the request. The X-Forwarded-For request header can be included with traffic to the targets, which will allow the web server to know the user's IP address and keep accurate logs for security purposes.

The questions talks about auto scaling, setting the LB's Target group to a specific IP will remove the ability to scale. gRPC via HTTPS is supported and ALB's support mTLS https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/deploy-a-grpc-based-application-on-an-amazon-eks-cluster-and-access-it-with-an-application-load-balancer.html

Answer is A

NLB is working on L4 instead of L7 (HTTPS).

A is the correct answer. ALB with HTTPS listener, and X-Forwarded-For is added by default.

I think that It's correct answer is A according to the SPOTO products.

I think that it's correcty answer is A.

ALB: TLS termination, path based listener configuration and X-Forwarded-For request header

https://aws.amazon.com/blogs/networking-and-content-delivery/accessing-private-application-load-balancers-and-instances-through-aws-global-accelerator/

Target group based rule

The correct answer is A. Deploy an Application Load Balancer with an HTTPS listener. Use path-based routing rules to forward the traffic to the correct target group. Include the X-Forwarded-For request header with traffic to the targets.

1 week ago A - correct. Here's why: An Application Load Balancer (ALB) can be used to route traffic to multiple target groups based on the URL in the request. The ALB can be configured with an HTTPS listener to ensure all traffic uses HTTPS. TLS processing can be offloaded to the ALB, which reduces the load on the web server. Path-based routing rules can be used to route traffic to the correct target group based on the URL in the request. The X-Forwarded-For request header can be included with traffic to the targets, which will allow the web server to know the user's IP address and keep accurate logs for security purposes.

A & C both can be correct but the company wants highly available design so C should be correct as it provides zonal isolation. ALB does not support Zonal Isolation for HA.

ALB does not preserve client IP address therefore I believer the answer to be D.

A should be correct. For B, host routing is based on domain name, it's also could route based on URL. But we don't need listener for each domain.

A - correct.

ALB & Path based routing is the correct answer