The correct answer is:
Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances. Route to the ALB from Route 53.

Using an Application Load Balancer (ALB) allows Route 53 to route all traffic to a single DNS name, while the ALB performs active health checks on the EC2 instances and only sends traffic to healthy ones. This is a scalable and fault-tolerant design that automatically avoids unhealthy instances without exposing them via DNS directly.

Why other options are incorrect:

Route 53 simple routing policy does not support health checks and distributes traffic randomly among all records.
Route 53 failover routing policy is meant for active-passive configurations, not for distributing traffic among many active EC2 instances.
Amazon CloudFront with EC2 as origin does not provide automatic health-based routing; it is meant for caching and content delivery, not backend health management.

Why this question matters: It tests your knowledge of combining Route 53 with Elastic Load Balancing for application resilience and health-aware traffic distribution.

Full AWS Practitioner Certification Question