AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 313

Question

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company's AWS environments. The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances. A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single AWS Region. The company has set up routing from the shared services VPC to other VPCs. Which steps should the solutions architect recommend to meet these requirements? (Choose three.)

Accepted Answer

Correct answer: A, C, F. The correct answer is A, C, F. Option A: Deploy two firewall appliances into the shared services VPC, each in a separate Availability Zone. Option C: Create a new Gateway Load Balancer in the shared services VPCreate a new target group, and attach it to the new Gateway Load Balancer Add each of the firewall appliance instances to the target group. Option F: Create a VPC Gateway Load Balancer endpoint. Add a route to the route table in the shared services VPC. Designate the new endpoint as the next hop for traffic that enters the shared services VPC from other VPCs. A Gateway Load Balancer inserts third-party virtual appliances transparently into the traffic path. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 313