ExpertAWS SAP-C02 · Question 12 · Domain 1.1: Network Connectivity
An enterprise is implementing a centralized egress architecture using AWS Network Firewall. They have a Transit Gateway connecting multiple spoke VPCs to a central Security VPC. Which TWO routing configurations are required to ensure all internet-bound traffic from spoke VPCs is inspected by the Network Firewall? (Select TWO)
An enterprise is implementing a centralized egress architecture using AWS Network Firewall. They have a Transit Gateway connecting multiple spoke VPCs to a central Security VPC. Which TWO routing configurations are required to ensure all internet-bound traffic from spoke VPCs is inspected by the Network Firewall? (Select TWO)
Answer options:
In the spoke VPCs, set the default route (0.0.0.0/0) to point to the Internet Gateway.
In the spoke VPCs, set the default route (0.0.0.0/0) to point to the Transit Gateway attachment.
In the Transit Gateway route table, set the default route to point to the spoke VPC attachments.
In the Security VPC, set the default route in the public subnet to point to the Transit Gateway.
In the Transit Gateway route table associated with the spoke VPCs, set the default route (0.0.0.0/0) to point to the Security VPC attachment.
Configure VPC Peering between all spoke VPCs and the Security VPC.
How to approach this question
Full Answer
Common mistakes
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 2
75 questions · hints · full answers · grading