SAA – Timed Mode Set 5, Question 30

[J C]

Hi, just wanted some clarification on a question in the SAA practice exams.

A logistics company based in the USA runs its web application on a fleet of Amazon EC2 instances in an Auto Scaling group. It runs the same application in multiple AWS regions to cater to clients across several countries. A recent government policy has been enacted that prohibits the company from servicing a specific country.

Which of the following options is the recommended action to comply with the government requirement?

1) Create a Web ACL rule in AWS WAF to block the specified country. Associate the rule to the Application Load Balancers.

2) Update the route tables to forward all outbound traffic to AWS Network Firewall and configure a stateful domain list rule group to block the specified country

3) Update the Network Access Control Lists of all subnets used by the Amazon EC2 instances to “deny” all IP addresses from the specific country

4) Update the Network Access Control Lists of all subnets used by the Application Load Balancers to “deny” all IP addresses from the specific country.

The question doesn’t say that an Application Load Balancer is in use, just that the EC2 instances are in an Auto Scaling group deployed into multiple regions. Is it implied that an Application Load Balancer is in use because the EC2 instances are in Auto Scaling group or for another reason?

Thanks for the awesome practice exams by the way!

[Irene-TutorialsDojo]

Hello J C,

Thank you for reaching out.

The scenario does not explicitly mention an Application Load Balancer (ALB). However, it is common practice to use a load balancer when deploying a web application with EC2 instances in an Auto Scaling group, especially when operating across multiple AWS regions. Load balancers help distribute incoming traffic across multiple instances for scalability and high availability.

AWS recommends using load balancers with Auto Scaling groups to ensure efficient traffic management and fault tolerance. Given the geographical distribution of the application, it’s reasonable to assume that a load balancer might be in use.

Hope this helps.

Cheers,
Irene @Tutorials Dojo

[J C]

Makes sense, thanks