easymultiple choiceObjective-mapped

An internal service is hosted behind an Application Load Balancer (ALB) with targets spread across two Availability Zones. If the targets in one Availability Zone become unhealthy, the service must continue serving traffic from the healthy AZ. What change most directly improves resilience at the load-balancing layer?

Question 1easymultiple choice
Full question →

An internal service is hosted behind an Application Load Balancer (ALB) with targets spread across two Availability Zones. If the targets in one Availability Zone become unhealthy, the service must continue serving traffic from the healthy AZ. What change most directly improves resilience at the load-balancing layer?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

A

Distractor review

Turn off health checks and rely only on instance CPU utilization to route traffic.

ALB routing depends on target health as determined by health checks. Turning health checks off prevents the ALB from detecting and removing unhealthy targets from service, so traffic can still be routed to failing targets.

B

Distractor review

Configure ALB listener rules to route all traffic to a single target group in one Availability Zone.

Routing to a single AZ removes multi-AZ redundancy at the routing layer. If that AZ becomes unhealthy, clients will be impacted.

C

Best answer

Configure target group health checks so the ALB stops sending traffic to unhealthy targets and continues routing to healthy targets in the other Availability Zone.

With target group health checks enabled and configured correctly, the ALB evaluates each target's health and stops routing requests to targets marked unhealthy. As long as healthy targets exist in the other AZ, the ALB preserves reachability.

D

Distractor review

Store requests in an SQS queue before routing them to the ALB.

SQS can decouple producers and consumers and provide buffering, but it does not change how the ALB determines target health or decides which targets receive traffic. The stated requirement focuses on load-balancing behavior when targets become unhealthy.

Common exam trap

Common exam trap: NAT rules depend on direction and matching traffic

NAT is not only about the public address. The inside/outside interface roles and the ACL or rule that matches traffic are just as important.

Technical deep dive

How to think about this question

NAT questions usually test address translation, overload/PAT behaviour, static mappings and whether the right traffic is being translated. Read the interface direction and address terms carefully.

KKey Concepts to Remember

  • Static NAT maps one inside address to one outside address.
  • PAT allows many inside hosts to share one public address using ports.
  • Inside local and inside global describe the private and translated addresses.
  • NAT ACLs identify traffic for translation, not always security filtering.

TExam Day Tips

  • Identify inside and outside interfaces first.
  • Check whether the scenario needs static NAT, dynamic NAT or PAT.
  • Do not confuse NAT matching ACLs with normal packet-filtering intent.

Related practice questions

Related SAA-C03 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

What does this SAA-C03 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Configure target group health checks so the ALB stops sending traffic to unhealthy targets and continues routing to healthy targets in the other Availability Zone. — Configure ALB target group health checks. When health checks mark targets as unhealthy, the ALB automatically stops sending requests to them and only routes to targets that remain healthy across the configured Availability Zones. This directly addresses the scenario where unhealthy targets in one AZ would otherwise reduce availability at the load balancer layer. Disabling health checks prevents the ALB from reactively removing unhealthy targets from rotation. Forcing traffic to a single target group/AZ eliminates multi-AZ availability. SQS buffering may improve decoupling, but it does not instruct the ALB which targets are healthy, so it does not directly ensure reachability during target failures.

What should I do if I get this SAA-C03 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.

Discussion

Loading comments…

Sign in to join the discussion.