WorksheetsELB
Total questions: 15
Worksheet time: 12mins
routing to route traffic from web servers to smart.com/api and from mobile devices to smart.com/mobile. A developer advises that the previous recommendation is not needed and that requests should be sent to api.smart.com and mobile.smart.com instead. Which of the following routing options were discussed? (select two)
URL Path
cookie value
client IP
web browser version
hostname
You are responsible for an application that runs on multiple Amazon EC2 instances. In front of the instances is an Internet-facing load balancer that takes requests from clients over the internet and distributes them to the EC2 instances. A health check is configured to ping the index.html page found in the root directory for the health status. When accessing the website via the internet visitors of the website receive timeout errors. What should be checked first to resolve the issue?
Security Groups
IAM Roles
The application is down
The ALB is warming up
Your web application front end consists of 5 EC2 instances behind an Application Load Balancer. You have configured your web application to capture the IP address of the client making requests. When viewing the data captured you notice that every IP address being captured is the same, which also happens to be the IP address of the Application Load Balancer. What should you do to identify the true IP address of the client?
Look into the X-Forward-Proto header in the backend
Modify the front-end of the website so that the users send their IP in the requests
Look into the X-Forward-For header in the backend
Look into the client's cookie
You have an Application Load Balancer listening on port 80 registered with a single EC2 instance also listening on port 80. You plan on changing the listener. Which of the following options is not a supported listener?
Websocket
HTTP
HTTPS
TCP
Your company uses an Application Load Balancer to route incoming end-user traffic to applications hosted on Amazon EC2 instances. The applications capture incoming request information and store it in the Amazon Relational Database Service (RDS) running Microsoft SQL Server DB engines. Your team lead requested that you capture the clients IP address, how will you achieve that?
We should change the client application to send their IP as part of the payloads
Use the header X-Forwarded-For
Use the header X-Forwarded-IP
Change the security groups rules
You are running a cloud file storage website with an Internet-facing load balancer, which routes requests from users over the internet to 10 EC2 instances registered to the load balancer. Your users are complaining that your website always asks them to re-authenticate when they switch pages. You are puzzled because this behavior is not seen in your local machine or dev environment. What could be the reason?
The Load Balancer does not have stickiness enabled
The application must have a bug
The EC2 instances log out users because the don't see their true IP's
The Load Balancer does not have TLS enabled
New cloud-developers is learning to reap the benefits of elasticity, horizontal scalability, and high availability. They inherited a web application running in the us-east-1 region with three availability zones (us-east-1a, us-east1-b, and us-east-1c) whose incoming web traffic is routed by a load balancer. When one of the EC2 instances hosting the web application crashes, they realize that the load balancer continues to route traffic to that instance causing intermittent issues. Which of the following should the developer do to minimize this problem?
Enable Health Checks
Enable Stickiness
Enable Multi AZ deployments
Enable SSL
You are designing a high-performance application that requires millions of connections. You have several EC2 instances running Apache2 web servers and the application will require capturing the user’s original source IP address and source port without the use of X-Forwarded-For. Which of the following options will meet your needs?
Application Load Balancer
Network Load Balancer
Elastic Load Balancer
Classic Load Balancer
Your company has a load balancer in a VPC configured to be internet facing. The public DNS name assigned to the load balancer is myDns-1234567890.us-east-1.elb.amazonaws.com. When your client applications first load they capture the load balancer DNS name and resolve it to the IP address. The DNS name is a value used throughout other actions in the application. At load, client applications work well but unexpectedly stop working after a while. What is the reason for this?
The load balancer is highly available and it's public IP may change. The DNS is constant
Your security groups are not stable
You need to enable stickiness
You need to disable multi-AZ deployments
There are many clients complaining that the online trading application of an investment bank is always down. Your manager instructed you to re-design the architecture of the application to prevent the unnecessary service interruptions. To ensure high availability, you set up the application to use an ELB to distribute the incoming requests across an auto-scaled group of EC2 instances in two single Availability Zones.
In this scenario, what happens when an EC2 instance behind an ELB fails a health check?
The EC2 instance gets terminated automatically by the ELB.
The EC2 instance gets quarantined by the ELB for root cause analysis.
The EC2 instance is replaced automatically by the ELB.
The ELB stops sending traffic to the EC2 instance.
You have a new e-commerce web application written in Angular framework which is deployed to a fleet of EC2 instances behind an Application Load Balancer. You configured the load balancer to perform health checks on these EC2 instances.
What will happen if one of these EC2 instances failed the health checks?
The EC2 instance gets terminated automatically by the Application Load Balancer.
The EC2 instance gets quarantined by the Application Load Balancer for root cause analysis.
The EC2 instance is replaced automatically by the Application Load Balancer.
The Application Load Balancer stops sending traffic to the instance that failed its health check.
In Elastic Load Balancing, there are various security features that you can use such as Server Order Preference, Predefined Security Policy, Perfect Forward Secrecy and many others. Perfect Forward Secrecy is a feature that provides additional safeguards against the eavesdropping of encrypted data through the use of a unique random session key. This prevents the decoding of captured data, even if the secret long-term key is compromised.
Perfect Forward Secrecy is used to offer SSL/TLS cipher suites for which two AWS services?
EC2 and S3
CloudFront and Elastic Load Balancing
Trusted Advisor and GovCloud
CloudTrail and CloudWatch
You are helping out a new DevOps Engineer to design her first architecture in AWS. She is planning to develop a highly available and fault-tolerant architecture which is composed of an Elastic Load Balancer and an Auto Scaling group of EC2 instances deployed across multiple Availability Zones. This will be used by an online accounting application which requires path-based routing, host-based routing, and bi-directional communication channels using WebSockets.
Which is the most suitable type of Elastic Load Balancer that you should recommend for her to use?
Application Load Balancer
Network Load Balancer
Either a Classic Load Balancer or a Network Load Balancer
Classic Load Balancer
What type of redirects does Application Load Balancer support ? (Pick all correct choice)
HTTP to HTTP
HTTP to HTTPS
HTTPS to HTTPS
HTTPS to HTTP
What is the LCU metrics for TCP traffic on Network Load Balancer? (Pick all the right choice)
600 new TCP connections per second.
800 new TCP connections per second.
1 GB per hour for EC2 instances, containers and IP addresses as targets.
100,000 active TCP connections (sampled per minute).
120,000 active TCP connections (sampled per minute).
