High Availability and Scalability: ELB and ASG Flashcards
A server that forwards traffic to multiple servers downstream
A load balancer
Deprecated load balancer type that provides a fixed hostname and supports TCP (Layer 4) and HTTP/HTTPS (Layer 7) traffic
Classic Load Balancer
True/False: Application Load Balancers are a great fit for micro services and container-based applications
True
True/False: A Network Load Balancer can have multiple static IPs per AZ
False - Network Load Balancers have one static IP per AZ
Load balancer type that is used to forward TCP & UDP traffic to your instances
Network Load Balancer
True/False: Sticky sessions (session affinity) can be enabled for all load balancers
False - It can only be enabled for Classic and Application load balancers
Feature that allows clients to be redirected to the same instance behind a load balancer on subsequent requests
Sticky Sessions
What are the two types of cookies you can have when enabling sticky sessions on a load balancer?
Application-based cookies and duration-based cookies
Feature that allows each load balancer instance to distribute traffic evenly across all registered instances in all AZs
Cross-Zone Load Balancing
Cross-Zone Load Balancing is enabled by default for all load balancers
False - Enabled by default for an Application load balancer, but disabled by default for Network and Classic
This type of certificate allows traffic between your clients and your load balancer to be encrypted in transit
SSL Certificate
Newer protocol that allows you to load multiple SSL certificates onto one web server
Server Name Indication (SNI)
True/False: Server Name Indication is supported by all Load Balancers
False - It is only supported by Application and Network load balancers, as well as CloudFront
Which Load balancers use Server Name Indication (SNI) to support multiple listeners with multiple SSL certificates?
Application and Network Load Balancers
Configurable time to complete ‘in-flight’ requests while an instance in de-registering from the ELB due to being unhealthy
Connection Draining / Deregistration Delay
Scaling policy type that allows you to set a baseline for your ASG (i.e. “I want ASG CPU utilization to stay at 40%”)
Target Tracking Scaling
Scaling policy that allows you to set actions to take based on specified CloudWatch alarms
Simple/Step Scaling
Scaling policy that allows you to set scaling based on anticipated usage patterns
Scheduled Actions
Scaling policy that uses ML to anticipate resource needs
Predictive Scaling
True/False: Auto Scaling groups are configured using a Launch Template
True
A collection of EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management
Auto Scaling Group
If your website only sees traffic coming from private IPv4 addresses that belong to your Application Load Balancer, what should you do to get the IP address of clients connected to your website?
Modify your website’s backend to get the client IP address from the X-Forwarded-For header
Which protocols does an Application Load Balancers support?
HTTP, HTTPS, and WebSocket
ALBs can route traffic to different Target Groups based on what four traffic characteristics?
URL Path, Hostname, HTTP Headers, and Query Strings
Network Load Balancers have one static IP address per AZ. What do Application Load Balancers and Classic Load Balancers have?
A static DNS name
What are the three reserved cookie names for ELBs?
AWSALB, AWSALBAPP, and AWSALBTG
A web application hosted on a fleet of EC2 instances managed by an Auto Scaling Group. You are exposing this application through an Application Load Balancer. Both the EC2 instances and the ALB are deployed on a VPC with the following CIDR 192.168.0.0/18. How do you configure the EC2 instances’ security group to ensure only the ALB can access them on port 80?
Add an Inbound Rule with port 80 and ALB’s Security Group as the source
You have a website hosted in EC2 instances in an Auto Scaling Group fronted by an Application Load Balancer. Currently, the website is served over HTTP, and you have been tasked to configure it to use HTTPS. You have created a certificate in ACM and attached it to the Application Load Balancer. What you can do to force users to access the website using HTTPS instead of HTTP?
Configure the Application Load Balancer to redirect HTTP to HTTPS
What type of load balancer offers Content-Based Routing?
Application Load Balancer
True/False: You can assign an Elastic IP to an Application Load Balancer
False
Feature used ensure that an Elastic Load Balancer stops sending requests to instances that are de-registering or unhealthy while keeping the existing connections open
Connection draining
By default, cross-zone load balancing is _____ for Application Load balancer and _____ for Network Load Balancer
enabled; disabled