AWS Certified Advanced Networking - Specialty (#28)

An organization with a growing e-commerce presence uses the AWS CloudHSM to offload the SSL/TLS processing of its web server fleet. The company leverages Amazon EC2 Auto Scaling for web servers to handle the growth. What architectural approach is optimal to scale the encryption operation?

Use multiple CloudHSM instances, and load balance them using a Network Load Balancer.
Use multiple CloudHSM instances to the cluster;request to it will automatically load balance.
Enable Auto Scaling on the CloudHSM instance, with similar configuration to the web tier Auto Scaling group.
Use multiple CloudHSM instances, and load balance them using an Application Load Balancer.