You are moving a two-tier application into an Amazon VPC. An Elastic Load Balancing (ELB) load balancer is configured in front of the application tier. The application tier is driven through RESTful interfaces. The data tier uses relational database service (RDS) MySQL. Company policy requires end-to-end encryption of all data in transit. What ELB configuration complies with the corporate encryption policy?
A) Configure the ELB load balancer protocol as HTTP. Configure the application instances for SSL termination. Configure Amazon RDS for SSL, and use REQUIRE SSL grants.
B) Configure the ELB protocols in TCP mode. Configure the application instances for SSL termination. Configure Amazon RDS for SSL, and use REQUIRE SSL grants.
C) Configure the ELB load balancer protocol as HTTPS. Offload application instance encryption to the load balancer. Install your SSL certificate on Amazon RDS, and configure SSL.
D) Configure the ELB protocols in SSL mode. Offload application instance encryption to the load balancer. Install your SSL/TLS certificate on Amazon RDS, and configure SSL.

Question

Quizplus · Accepted Answer

The ELB load balancer protocol must be configured as HTTPS to comply with the corporate encryption policy. This will ensure that all data in transit between the load balancer and the application instances is encrypted. Additionally, the application instances should be configured for SSL termination, and Amazon RDS should be configured for SSL with REQUIRE SSL grants. This will ensure that all data in transit between the application instances and the database is also encrypted.

You Are Moving a Two-Tier Application into an Amazon VPC