A retail company is launching a global web application. The company must ensure that users experience minimal latency when accessing static assets. Additionally, they must implement a stateless security layer at the boundary of their application's subnets to control inbound and outbound traffic.
Which two AWS services or features should the company configure to meet these requirements? (Select TWO.)
- Amazon CloudFront to cache static assets globally at edge locations close to usersAnswer
- Network Access Control Lists (Network ACLs) to define stateless firewall rules at the subnet levelAnswer
- CSecurity Groups to apply stateless traffic filtering rules directly to the subnet
- DVPC Peering to route public user traffic directly to the subnets based on latency
- EAWS Transit Gateway to centrally cache static web assets at regional edge locations
Answer
The correct answers are Amazon CloudFront (to cache static assets globally) and Network Access Control Lists (to act as a stateless subnet-level firewall).
The correct services are Amazon CloudFront, which minimizes latency by caching static assets close to users, and Network Access Control Lists (NACLs), which serve as a stateless firewall at the subnet boundary.
Step-by-Step Solution
Key Concept
AWS Network Services (Amazon CloudFront and Amazon VPC Network ACLs)