CV0-004 Cloud Architecture and Design Practice Question
A cloud engineer is deploying a web application that requires SSL termination and content-based routing. Which type of load balancer should be used?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Application Load Balancer
An Application Load Balancer (layer 7) can perform SSL termination and route based on content such as URL paths or host headers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Gateway Load Balancer
Why it's wrong here
Gateway Load Balancer operates at layer 3/4 to transparently route traffic through third-party virtual appliances, so it cannot terminate SSL or inspect HTTP content for routing decisions. It is tempting because it is the correct choice when deploying inline firewall or intrusion-prevention appliances at scale.
- ✗
Classic Load Balancer
Why it's wrong here
Classic Load Balancer operates at layer 4/7 but lacks native content-based routing rules, so it cannot inspect HTTP paths or host headers to direct traffic. It is tempting because it does support SSL termination, which is one stated requirement, and suits legacy EC2-Classic architectures needing basic TCP or HTTP balancing.
- ✓
Application Load Balancer
Why this is correct
An Application Load Balancer operates at layer 7, terminating TLS and routing requests by URL path, host header or content. Network load balancers work at layer 4, forwarding packets by IP and port only, so they cannot inspect content or terminate SSL.
- ✗
Network Load Balancer
Why it's wrong here
Network Load Balancer operates at layer 4, forwarding TCP/UDP flows by IP and port, so it cannot terminate SSL or perform content-based routing on HTTP paths. It is tempting because it handles SSL passthrough and suits ultra-low-latency, high-throughput workloads requiring static IP addresses.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 834-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.