ExampleCom Is Hosted on Amazon EC2 Instance Behind an Application

question 88

Multiple Choice

Example.com is hosted on Amazon EC2 instance behind an Application Load Balancer (ALB) . Third-party host intrusion detection system (HIDS) agents that capture the traffic of the EC2 instance are running on each host. The company must ensure they are using privacy enhancing technologies for users, without losing the assurance the third-party solution offers. What is the MOST secure way to meet these requirements?

• A) Enable TLS pass through on the ALB, and handle decryption at the server using Elliptic Curve Diffie-Hellman (ECDHE) cipher suites.
• B) Create a listener on the ALB that uses encrypted connections with Elliptic Curve Diffie-Hellman (ECDHE) cipher suites, and pass the traffic in the clear to the server.
• C) Create a listener on the ALB that uses encrypted connections with Elliptic Curve Diffie-Hellman (ECDHE) cipher suites, and use encrypted connections to the servers that do not enable Perfect Forward Secrecy (PFS).
• D) Create a listener on the ALB that does not enable Perfect Forward Secrecy (PFS) cipher suites, and use encrypted connections to the servers using Elliptic Curve Diffie-Hellman (ECDHE) cipher suites.

---

Definitions:

Equipment Downtime

The period during which machinery or equipment is not operational due to maintenance, repairs, or malfunctions.

Product Quality

The measure of a product's ability to meet or exceed customer expectations in terms of durability, functionality, and reliability.

Training Benefits

Advantages gained from training, such as improved performance, higher productivity, and reduced errors.

Human Resource

The department within an organization responsible for hiring, managing, and developing employees.