ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional topic 1 question 715 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional
Question #: 715
Topic #: 1
[All AWS Certified Solutions Architect - Professional Questions]

An AWS customer has a web application that runs on premises. The web application fetches data from a third-party API that is behind a firewall. The third party accepts only one public CIDR block in each client's allow list.
The customer wants to migrate their web application to the AWS Cloud. The application will be hosted on a set of Amazon EC2 instances behind an Application
Load Balancer (ALB) in a VPC. The ALB is located in public subnets. The EC2 instances are located in private subnets. NAT gateways provide internet access to the private subnets.
How should a solutions architect ensure that the web application can continue to call the third-party API after the migration?

  • A. Associate a block of customer-owned public IP addresses to the VPC. Enable public IP addressing for public subnets in the VPC.
  • B. Register a block of customer-owned public IP addresses in the AWS account. Create Elastic IP addresses from the address block and assign them to the NAT gateways in the VPC.
  • C. Create Elastic IP addresses from the block of customer-owned IP addresses. Assign the static Elastic IP addresses to the ALB.
  • D. Register a block of customer-owned public IP addresses in the AWS account. Set up AWS Global Accelerator to use Elastic IP addresses from the address block. Set the ALB as the accelerator endpoint.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by heyheyhei at March 15, 2021, 4:25 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
heyheyhei
Highly Voted 3 years, 2 months ago
B should be correct. When EC2 instances reach third-party API through internet, their privates IP addresses will be masked by NAT Gateway public IP address.
upvoted 22 times
...
wasabidev
Highly Voted 3 years, 2 months ago
B. instances in private subnets use NAT, not ELB
upvoted 9 times
...
dev112233xx
Most Recent 1 year, 7 months ago
Selected Answer: B
enableDnsSupport is enabled by default BUT enableDnsHostnames is NOT enabled by default (unless you use the default VPC which not mentioned in the question!) https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html
upvoted 1 times
...
Mimek
2 years, 8 months ago
Selected Answer: B
B IMHO
upvoted 2 times
...
tkanmani76
2 years, 10 months ago
D also works.
upvoted 1 times
Sonujunko
2 years, 9 months ago
ALB is for connections coming in not going out. EC2 will respond to sessions coming through ALB for 80 and 443, for EC2 initiate anything from 3rd party source on internet it need NAT G/W
upvoted 2 times
...
...
cldy
2 years, 11 months ago
B s correct.
upvoted 1 times
...
AzureDP900
3 years ago
B seems right choice.
upvoted 1 times
...
andylogan
3 years, 1 month ago
It's B
upvoted 1 times
...
tgv
3 years, 1 month ago
BBB ---
upvoted 1 times
...
blackgamer
3 years, 1 month ago
B obviously.
upvoted 1 times
...
WhyIronMan
3 years, 1 month ago
I'll go with B
upvoted 4 times
...
zapper1234
3 years, 2 months ago
Why not C? C is the only answer that meets the solution criteria by only have "one" IP.
upvoted 1 times
vimgoru24
3 years, 1 month ago
There is no such criteria. The criteria is to have calling IP in the predefined CIDR range. The B covers that.
upvoted 1 times
...
Viper57
3 years, 1 month ago
You cannot assign an elastic IP address to an ALB, only NLBs.
upvoted 3 times
...
...
hk436
3 years, 2 months ago
B is my answer!!
upvoted 1 times
...
Waiweng
3 years, 2 months ago
it's B
upvoted 4 times
...
blackgamer
3 years, 2 months ago
Agree with B. NAT.
upvoted 2 times
...
SD13
3 years, 2 months ago
B looks like a good option compared to others.
upvoted 2 times
...
kejam
3 years, 2 months ago
B: https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-bring-your-own-ip-byoip-for-amazon-vpc/
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago