AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 83

Question

A company is deploying third-party firewall appliances for traffic inspection and NAT capabilities in its VPC. The VPC is configured with private subnets and public subnets. The company needs to deploy the firewall appliances behind a load balancer. Which architecture will meet these requirements MOST cost-effectively?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Deploy a Gateway Load Balancer with the firewall appliances as targets. Configure the firewall appliances with two network interfaces: one network interface in a private subnet and another network interface in a publi... A Gateway Load Balancer inserts third-party virtual appliances transparently into the traffic path. A load balancer distributes traffic across targets in multiple AZs for availability and scale. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 83