AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 124

Question

A company has users who work from home. The company wants to move these users to Amazon WorkSpaces for additional security visibility. The company has deployed WorkSpaces in its own AWS account in VPC A. A network engineer decides to provide the security visibility by using two firewall appliances behind a Gateway Load Balancer (GWLB). The network engineer provisions another VPC, VPC B, in a separate account and deploys the two firewall appliances in separate Availability Zones. What should the network engineer do to configure the network connectivity for this solution?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a GWLB in VPC B with the firewall appliance instances as targets. Use the GWLB to create a GWLB endpoint. Add the AWS principal ARN of the WorkSpaces account to the principal allow list of the GWLB endpoint. In... A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 124