Which combination of actions will meet these requirements?

Explanations:

While creating a primary failover routing policy record and pointing to the ALB is correct, this option does not mention associating it with a Route 53 health check, which is required.

Using an AWS Lambda function is not necessary for this solution, as Route 53 can automatically handle failover based on health check status without manual intervention.

Creating a primary failover routing policy record pointing to the ALB and associating it with a Route 53 health check enables automated health-based failover control.

Secondary failover routing policies should not have health checks. Only primary policies need them for monitoring the main application status, as secondary is only for fallback.

Creating a secondary failover routing policy record and pointing it to the S3 static website enables automatic failover when the primary health check fails.