An application needs TLS terminated at the load balancer with certificates managed by ACM, plus path-based routing. Which balancer type supports this?
A.Application Load Balancer
L7 features (path routing + TLS). Correct.
B.Network Load Balancer
NLB can terminate TLS but can't route on HTTP paths.
C.Gateway Load Balancer
GWLB is for firewall/inspection chains — not app traffic termination.
D.Classic Load Balancer
CLB is legacy — avoid for new designs.
Why this answer
ALB = L7: TLS termination with ACM + host/path/header-based routing. NLB supports TLS listeners for termination but routes on TCP-level attributes (no path routing). GWLB is for inline appliances; CLB is legacy.
Correct answer: A · Last reviewed 2026-11-05
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Networking Operations practice session.
Practice Networking Operations