⚖️ Elastic Load Balancing (ELB) - SAA-C03 Practice Questions

ELB distributes incoming traffic across targets. Compare ALB, NLB, and GLB — understand health checks, sticky sessions, cross-zone load balancing, and SSL termination.

8Questions Available
2Exam Domains

Practice ELB Questions Now

Start a timed practice session focusing on Elastic Load Balancing (ELB) topics from the SAA-C03 question bank.

Start SAA-C03 Practice Quiz →

How ELB Is Really Tested in SAA-C03

ELB questions in SAA-C03 are usually service-selection questions where more than one load balancer looks plausible at first glance. The key is mapping protocol and routing requirements to the correct balancer type.

The exam expects you to connect balancing behavior with resilience decisions: health checks, deregistration delay, and multi-AZ target distribution are all frequent decision points.

Look for cues about static IP, TLS termination, host/path routing, or extreme throughput. Those clues usually eliminate at least one incorrect option quickly.

ALB vs NLB decisions that frequently decide the correct answer

Decision PointOption AOption BExam Takeaway
Traffic layer and routing needsALB for Layer 7 HTTP/HTTPS with host/path-based routingNLB for Layer 4 TCP/UDP with very high throughput and low latencyIf the scenario includes URL path routing or web app rules, ALB is generally expected.
Source IP and static endpoint requirementsNLB where preserving client source IP and static IP behavior mattersALB for application-aware routing logicWhen static IP or certain network-level behaviors are explicitly required, NLB is often favored.
Request draining and rollout safetyUse deregistration delay and health checks with autoscaled targetsTerminate instances immediately during deploymentsSafe rollout patterns usually require graceful draining to avoid dropping in-flight requests.

Microservices ingress with mixed workloads

A platform hosts multiple web services with path-based routing plus a separate high-throughput TCP ingestion endpoint.

  • Use ALB for HTTP services requiring host and path routing policies.
  • Use NLB for the dedicated TCP ingestion workload profile.
  • Configure target health checks aligned to service readiness.
  • Deploy across multiple Availability Zones for failure tolerance.

Common Exam Trap: Choosing a single balancer type for incompatible protocol and routing requirements is a frequent exam distractor.

SAA-C03 ELB Question Bank (8 Questions)

Browse all 8 practice questions covering Elastic Load Balancing (ELB) for the SAA-C03 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

  1. Question 1Design Resilient Architectures

    A microservices application behind an ALB has an initialization endpoint `/health` that returns HTTP 200 only after the service is fully ready. During deployments, new instances should not receive traffic until they pass health checks. How should health check configuration ensure traffic routing accuracy?

    ASet health check path to `/health` with 30-second intervals and 3 consecutive success thresholds.
    BUse TCP health checks on port 80 instead of HTTP health checks.
    CConfigure health check grace period to match instance startup time.
    DDisable health checks during deployment windows.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  2. Question 2Design High-Performing Architectures

    A solutions architect must design a solution for a web application that requires session affinity (sticky sessions) and health checks. Which load balancer should be used?

    AApplication Load Balancer
    BNetwork Load Balancer
    CClassic Load Balancer
    DGateway Load Balancer

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  3. Question 3Design Secure Architectures

    A company wants to authenticate users accessing an internal web application hosted on Amazon EC2 instances behind an Application Load Balancer (ALB). The users are authenticated via a corporate OIDC (OpenID Connect) identity provider. The solution must minimize code changes on the application side. Which strategy should be implemented?

    AConfigure the ALB with an HTTPS listener and an authentication rule to authenticate users using Amazon Cognito user pools. Connect Cognito to the OIDC provider.
    BUse AWS IAM Identity Center (successor to AWS SSO) to handle authentication and pass the JWT token to the backend instances.
    CImplement the OIDC client logic directly on the EC2 instances using the provider's SDK.
    DUse API Gateway in front of the ALB and configure a Lambda Custom Authorizer.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  4. Question 4Design Resilient Architectures

    An ALB target group contains 3 instances. During a deployment, 2 instances are temporarily unhealthy while updating. The ALB should continue serving traffic from the healthy instance. What target group configuration ensures continued availability?

    ASet unhealthy threshold to 5 consecutive failures with 30-second intervals.
    BEnable Connection Draining with 300-second delay.
    CConfigure health check path to a lightweight endpoint (e.g., `/ping`).
    DReduce healthy threshold to 1 consecutive success with 10-second intervals.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  5. Question 5Design High-Performing Architectures

    A microservices application has different service endpoints that require routing based on URL paths (/api/users, /api/orders, /api/inventory) to different backend services. Which ALB feature enables efficient path-based routing?

    AConfigure multiple target groups with path-based routing rules in listener rules.
    BUse a single target group with backend services handling routing internally.
    CDeploy separate ALBs for each microservice endpoint.
    DUse Network Load Balancer with TCP-based routing instead.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  6. Question 6Design High-Performing Architectures

    A web application requires session affinity and health checks. Which load balancer should be used?

    AApplication Load Balancer
    BNetwork Load Balancer
    CClassic Load Balancer
    DGateway Load Balancer

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  7. Question 7Design Secure Architectures

    An e-commerce application running on an Application Load Balancer (ALB) and EC2 instances is facing a distributed denial-of-service (DDoS) attack (HTTP floods) and SQL injection attempts. Which combination of services provides the MOST secure and operational efficient defense?

    AEnable AWS Shield Standard. Use Security Groups to block the attacking IP addresses.
    BEnable AWS Shield Advanced. Deploy AWS WAF on the ALB with managed rules for SQL injection and rate-based rules for the flood.
    CDeploy CloudFront in front of the ALB. Configure OAI (Origin Access Identity) to restrict access.
    DUse Route 53 Geolocation routing to block traffic from countries where the attack originates.

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz
  8. Question 8Design Secure Architectures

    A company exposes a public API via an Application Load Balancer (ALB). They are concerned about common web exploits like SQL injection and cross-site scripting (XSS). Which AWS service should be used to protect the API from these threats?

    AAWS Shield Advanced
    BNetwork ACLs (NACLs)
    CAWS WAF
    DSecurity Groups

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start SAA-C03 Quiz

Key ELB Concepts for SAA-C03

elbalbnlbload balancertarget grouphealth checksticky sessioncross-zone

SAA-C03 ELB Exam Tips

Elastic Load Balancing (ELB) questions in SAA-C03 are typically scenario-based. Focus on architecture trade-offs, resilience, and secure-by-default design choices. Priority concepts: elb, alb, nlb, load balancer, target group, health check.

What SAA-C03 Expects

  • Anchor your answer in choose the most reliable and cost-aware architecture pattern, not just a feature match.
  • ELB scenarios for SAA-C03 are frequently mapped to Domain 2 (26%), Domain 3 (24%), so read the objective carefully before picking controls or architecture.
  • Expect multi-topic scenarios where ELB interacts with IAM, networking, storage, or observability patterns rather than appearing as an isolated question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and vendor best practices.

High-Value ELB Concepts

  • Know the core ELB building blocks cold: elb, alb, nlb, load balancer.
  • Review the edge-case features and limits for target group, health check; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how ELB pairs with Auto Scaling, EC2, VPC, Route 53 in real deployment patterns.
  • For SAA-C03, explain why the chosen ELB design meets reliability, security, and cost expectations better than the alternatives.

Common SAA-C03 Traps

  • Watch for answers that solve today's issue but do not scale across multiple AZs.
  • Questions in Design Resilient Architectures often include distractors that look correct for ELB but violate least-privilege, durability, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two ELB implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Design Resilient Architectures (26%) outcomes for SAA-C03?
  • Can you explain security and access boundaries for ELB without relying on default-open assumptions?
  • Can you describe how ELB integrates with Auto Scaling and EC2 during failure, scaling, and monitoring events?

Exam Domains Covering ELB

Related Resources

More SAA-C03 Study Resources