ExpertAWS SAP-C02 · Question 45 · Domain 1.1: Network Connectivity
A global enterprise uses AWS Transit Gateway to connect 100 VPCs across two AWS Regions (us-east-1 and eu-west-1). They want to inspect all traffic flowing between the VPCs, as well as traffic going to the internet, using a centralized fleet of third-party firewall appliances. The architecture must be highly available and automatically scale. Which combination of services and configurations should be used? (Select THREE)
A global enterprise uses AWS Transit Gateway to connect 100 VPCs across two AWS Regions (us-east-1 and eu-west-1). They want to inspect all traffic flowing between the VPCs, as well as traffic going to the internet, using a centralized fleet of third-party firewall appliances. The architecture must be highly available and automatically scale. Which combination of services and configurations should be used? (Select THREE)
Answer options:
Deploy the third-party firewalls on EC2 instances in a centralized inspection VPC.
Use AWS Network Load Balancer (NLB) to distribute traffic to the firewalls.
Use AWS Gateway Load Balancer (GWLB) to distribute traffic to the firewalls.
Configure Transit Gateway routing tables to direct cross-VPC and internet-bound traffic to the inspection VPC.
Use VPC Peering to connect all VPCs directly to the inspection VPC.
Deploy AWS WAF on the Transit Gateway.
How to approach this question
Full Answer
Common mistakes
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 4
75 questions · hints · full answers · grading