Course menuSOA-C03

Exams / SOA-C03 / Load balancer and Route 53 health checks / Question 2

SOA-C03 practice question: Load balancer and Route 53 health checks (2 of 2)

Reliability and Business Continuity A free question from our original SOA-C03 practice exam. Try it, then open the answer to see why each option is right or wrong.

A logistics broker's internal shipment API runs behind an internal Application Load Balancer in private subnets in two Regions. Internal clients resolve api.corp.example through a Route 53 private hosted zone that has failover records for the two Regions. The engineer created Route 53 health checks that target the primary load balancer's private IP addresses, but they always report unhealthy. How should the engineer provide working health checks for the failover records?

Choose one answer.

  1. A. Create an HTTPS health check that targets the internal load balancer's DNS name instead of its private IP addresses.
  2. B. Allow the Route 53 health checker IP address ranges in the internal load balancer's security group on port 443.
  3. C. Replace the failover records with multivalue answer records that return both Regions' addresses to every client.
  4. D. Alarm on the load balancer's HealthyHostCount metric and create a health check that monitors the alarm.
Show the answer and explanation

Answer: D

Explanation

Route 53 health checkers send requests from the internet, so they cannot reach endpoints that have only private IP addresses. For resources inside a VPC, publish a metric that reflects health, alarm on it, and create a health check that follows the alarm state. Failover records in private hosted zones work with these alarm-based health checks.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.