AWS Certified Advanced Networking – Specialty (ANS-C01) — Question 223

A company has a web application that runs in eight AWS Regions. In each Region, the application is hosted on multiple compute resources behind an Application Load Balancer (ALB).

The different Regions are using different domains. Each ALB is configured to accept only HTTPS traffic. Each ALB uses a certificate from AWS Certificate Manager (ACM).

The company wants to simplify the application’s appearance on the web by using a new single domain for all Regions. A network engineer needs to implement this change by designing a solution that also will minimize latency for the application's end users.

Which combination of actions will meet these requirements? (Choose three.)

Answer options

• A. Use ACM to create an SSL/TLS certificate in the us-east-1 Region for the new domain.
• B. Set up latency-based routing in Amazon Route 53 for the new domain. Add the ALBs from all the Regions as targets.
• C. Create an alias record for the accelerator in Amazon Route 53 for the new domain.
• D. Create a standard accelerator in AWS Global Accelerator. Configure a listener for TCP traffic. Add all the ALBs as targets for the listener.
• E. Use ACM to create an SSLITLS certificate for each Region. Configure all the ALBs to use the certificate in their respective Regions.
• F. Create a custom routing accelerator in AWS Global Accelerator. Configure a listener for HTTPS traffic. Add all the ALBs as targets for the listener. Configure the accelerator to terminate TLS by using the SSLITLS certificate from ACM.

Correct answer: C, D, E

Explanation

The correct actions involve creating an alias record for the accelerator in Amazon Route 53 (C), setting up a standard accelerator with a TCP listener (D), and generating an SSL/TLS certificate for each Region (E) to ensure secure communication. Options A and B do not align with the requirements of using a single domain and optimizing routing, while F introduces unnecessary complexity with custom routing that is not needed for this scenario.