Correct Answer: ALB 'Cross-Zone Load Balancing' (disabled) with Target Group Health Checks
While Cross-Zone is usually enabled for balanced distribution, disabling it (and using proper health checks) can sometimes be used in specific architectures to force isolation. How...
Correct Answer
ALB 'Cross-Zone Load Balancing' (disabled) with Target Group Health Checks
Why This Answer Is Correct
While Cross-Zone is usually enabled for balanced distribution, disabling it (and using proper health checks) can sometimes be used in specific architectures to force isolation. However, the more modern approach is using Route 53 Application Recovery Controller.
This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your company has multiple VPCs across different regions and accounts. You need to enable a high-performance, many-to-many connectivity model while ensuring that you can centrally manage the routing and security between these VPCs and your on-premises data center via a 10 Gbps Direct Connect. What is the recommended architecture?
A SaaS provider wants to offer their customers a way to privately access their backend API services hosted on AWS without using public IPs, VPNs, or VPC Peering. Which AWS feature enables this cross-account private connectivity?
An organization wants to implement 'Zero Trust' networking for its developers to access internal admin panels hosted on EC2. They want to avoid a traditional VPN and instead use identity-based access with MFA. Which AWS service is best?
Which AWS networking feature allows you to physically connect your on-premises routers to an AWS edge location for a private, consistent experience, bypassing the public internet?
To reduce the network latency for users in remote locations without deploying full infrastructure in those regions, which AWS service provides a global network of edge locations to terminate user TCP/UDP connections closer to them?