A financial application requires end-to-end encryption. The application runs on EC2 instances behind an Application Load Balancer (ALB). The security team requires that the TLS connection terminates at the EC2 instances, not at the load balancer, to ensure data is encrypted in transit through the AWS network. How should the architect design this solution?

Identify the load balancer type that supports TCP passthrough.

What mistakes do candidates make on this AWS SAP-C02 question?

Assuming ALB can do TLS passthrough.

Q01A global enterprise is redesigning its network architecture across 50 AWS accounts. They require ...Hard

Q02A financial services company uses AWS Organizations to manage 100+ accounts. The security team ma...Medium

Q03An e-commerce company requires a multi-region active-active architecture for its critical order p...Medium

Q04A company is setting up a new AWS environment using AWS Control Tower. They need to ensure that a...Hard

Q05An enterprise has 50 AWS accounts under AWS Organizations. They want to implement a chargeback mo...Medium