For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 4Question 45
    Hard1 markMultiple Choice
    Domain 1.1: Network ConnectivityTransit GatewayGWLBSecurityNetworking

    AWS SAP-C02 · Question 45 · Domain 1.1: Network Connectivity

    A global enterprise uses AWS Transit Gateway to connect 100 VPCs across two AWS Regions (us-east-1 and eu-west-1). They want to inspect all traffic flowing between the VPCs, as well as traffic going to the internet, using a centralized fleet of third-party firewall appliances. The architecture must be highly available and automatically scale. Which combination of services and configurations should be used? (Select THREE)

    Answer options:

    A.

    Deploy the third-party firewalls on EC2 instances in a centralized inspection VPC.

    B.

    Use AWS Network Load Balancer (NLB) to distribute traffic to the firewalls.

    C.

    Use AWS Gateway Load Balancer (GWLB) to distribute traffic to the firewalls.

    D.

    Configure Transit Gateway routing tables to direct cross-VPC and internet-bound traffic to the inspection VPC.

    E.

    Use VPC Peering to connect all VPCs directly to the inspection VPC.

    F.

    Deploy AWS WAF on the Transit Gateway.

    How to approach this question

    Identify the load balancer designed for security appliances (GWLB) and the centralized routing pattern.

    Full Answer

    The standard enterprise pattern for centralized inspection uses a dedicated Inspection VPC. AWS Gateway Load Balancer (GWLB) is specifically designed to scale third-party network appliances transparently. Transit Gateway route tables are used to steer traffic into the GWLB endpoints.

    Common mistakes

    Choosing NLB instead of GWLB for firewall appliances.
    Question 44All questionsQuestion 46

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 4

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A global enterprise is redesigning its network architecture across 50 AWS accounts. They require ...HardQ02A financial services company uses AWS Organizations to manage 100+ accounts. The security team ma...MediumQ03An e-commerce company requires a multi-region active-active architecture for its critical order p...MediumQ04A company is setting up a new AWS environment using AWS Control Tower. They need to ensure that a...HardQ05An enterprise has 50 AWS accounts under AWS Organizations. They want to implement a chargeback mo...Medium
    View all 75 questions →