Q36 — AWS SAA-C03 Ch.14

Question 36 of 100 | ← Chapter 14

Q1036. A company is designing a web application with an internet-facing Application Load Balancer (ALB).The company needs the ALB to receive HTTPS web traffic from the public internet. The ALB must send only HTTPS traffic to the web application servers hosted on the Amazon EC2 instances on port 443. The ALB must perform a health check of the web application servers over HTTPS on port 8443.Which combination of configurations of the security group that is associated with the ALB will meet these requirements? (Choose three.)

Correct Answer: A. Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443., C. Allow HTTPS outbound traffic to the web application instances for port 443., E. Allow HTTPS outbound traffic to the web application instances for the health check on port 8443.

Explanation

To configure the security group associated with the Application Load Balancer (ALB) to meet the requirements for handling HTTPS traffic and performing health checks on the web application servers, the following three configurations are necessary:Required Security Group Configurations:\1. A. Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443. - This rule allows the ALB to receive HTTPS traffic from the internet on port 443, which is essential for the application to serve web traffic securely.\2. C. Allow HTTPS outbound traffic to the web application instances for port 443. - This rule enables the ALB to send HTTPS traffic to the web application servers on port 443, ensuring that the traffic between the ALB and the application servers is secure.\3. E. Allow HTTPS outbound traffic to the web application instances for the health check on port 8443. - This rule allows the ALB to perform health checks on the web application servers over HTTPS on port 8443, which is crucial for monitoring the health of the application.Evaluation of Other Options:B. Allow all outbound traffic to 0.0.0.0/0 for port 443. - This option is not required since we only need to allow outbound traffic specifically to the application instances and not all outbound traffic.D. Allow HTTPS inbound traffic from the web application instances for port 443. - This rule is not needed because the ALB does not need to receive inbound traffic from the application instances; it is the other way around (the ALB sends traffic to the instances).F. Allow HTTPS inbound traffic from the web application instances for the health check on port 8443. - This rule is not applicable because the health checks are initiated by the ALB, and therefore, the instances need to allow inbound traffic from the ALB, not the other way around.Conclusion:The correct combination of security group configurations to meet the requirements for the ALB is A, C, and E.