AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
A SaaS company operates two identical stacks of microservices behind regional Application Load Balancers (ALBs) in us-east-1 and eu-west-1. Customers need to reach the service through a pair of static, globally anycast IP addresses that automatically route each client to the closest healthy region. Operations must continue to see the original client IP in the ALB access logs. Which configuration meets these requirements while using the fewest AWS resources?
Create a single AWS Global Accelerator with one TCP listener on port 443 and two endpoint groups (us-east-1 and eu-west-1) that reference the regional ALB endpoints; use the default health checks and no client affinity.
Deploy an Amazon CloudFront distribution that lists both ALBs as origins, enable Origin Failover, and rely on CloudFront edge locations for latency-based routing.
Provision two separate Global Accelerators-one per region-map each to its regional ALB, and use Route 53 weighted DNS records to balance traffic across the accelerators.
Configure Route 53 latency-based A records that point to the ALB DNS names, attach health checks to each record, and use a traffic policy to expose static IP addresses.
AWS Global Accelerator provides two static anycast IPv4 addresses that automatically direct users to the nearest healthy endpoint. A single accelerator with one listener and two endpoint groups-each pointing to the regional ALB-delivers active-active, low-latency routing and automatic failover. Because Global Accelerator uses the TCP/UDP payload without network address translation, the original client IP is preserved and appears in ALB access logs. The solution needs only one accelerator resource; additional accelerators or DNS configurations are unnecessary.
Route 53 latency or weighted records do not supply static IP addresses, and CloudFront origin failover still resolves to DNS names that change over time and does not guarantee client-IP transparency to the ALB. Creating two accelerators introduces extra, unneeded resources and still requires DNS in front of them.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is AWS Global Accelerator and how does it work?
Open an interactive chat with Bash
Why is preserving the original client IP important in ALB access logs?
Open an interactive chat with Bash
How does AWS Global Accelerator compare to Route 53 or CloudFront for routing traffic?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Networking and Content Delivery
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .