A company needs to inspect all outbound traffic from their VPC to the internet. They want to block traffic to known malicious domains and implement stateful packet inspection. Which AWS service should they use?

Answer options:

AWS WAF

NAT Gateway

AWS Network Firewall

Security Groups

How to approach this question

Match 'outbound VPC traffic inspection' and 'domain filtering' to Network Firewall.

Full Answer

C.AWS Network Firewall✓ Correct

AWS Network Firewall is a managed service that makes it easy to deploy essential network protections for all of your Amazon VPCs. It supports stateful inspection and domain name filtering for outbound traffic.

Common mistakes

Choosing WAF, which is only for inbound web traffic.

Question 18 All questions Question 20

Practice the full AWS SAA-C03 Practice Exam 5

65 questions · hints · full answers · grading

More questions from this exam

Q01A company needs to grant an external auditor read-only access to specific AWS resources. The audi...Easy Q02An application running on EC2 instances needs to access objects in an S3 bucket. The security tea...Medium Q03A company is designing a VPC for a multi-tier web application. They need to block specific malici...Medium Q04A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...Hard Q05A company hosts a web application on an Application Load Balancer (ALB). They are experiencing SQ...Medium

View all 65 questions →