ANS-C01 Network Management and Operations Practice Question
A company is deploying a multi-tier application across two Availability Zones. The web tier must be highly available and scale based on traffic. The application load balancer (ALB) is internet-facing. Which TWO configurations are required to ensure the ALB can route traffic to the web instances across both AZs?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Register the ALB with subnets in at least two Availability Zones.
Options A and C are correct. The ALB must be associated with subnets in at least two Availability Zones to achieve high availability. Additionally, the target group must contain instances from both AZs to allow the ALB to route traffic across zones. Option B is incorrect because VPC route tables already allow cross-AZ traffic by default; no special configuration is needed. Option D is incorrect because security groups are applied to instances, not to AZs, and ALBs use security groups to control inbound traffic. Option E is incorrect because placing the ALB in a single subnet would limit its availability to one AZ, defeating high availability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Register the ALB with subnets in at least two Availability Zones.
Why this is correct
ALB requires multiple AZs for HA.
- ✗
Configure the VPC route tables to allow cross-AZ traffic.
Why it's wrong here
VPCs allow cross-AZ traffic by default.
- ✓
Create a target group that includes instances from both Availability Zones.
Why this is correct
Target group must include instances in all AZs where ALB is enabled.
- ✗
Assign a security group that allows traffic from both AZs.
Why it's wrong here
Security groups are not AZ-specific.
- ✗
Place the ALB in a single subnet for simplicity and attach multiple ENIs.
Why it's wrong here
Single subnet is a single point of failure.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.