ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Professional SAP-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional SAP-C02 exam
Go to Exam

Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 313 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02
Question #: 313
Topic #: 1
[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company's AWS environments. The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances.

A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single AWS Region. The company has set up routing from the shared services VPC to other VPCs.

Which steps should the solutions architect recommend to meet these requirements? (Choose three.)

  • A. Deploy two firewall appliances into the shared services VPC, each in a separate Availability Zone.
  • B. Create a new Network Load Balancer in the shared services VPC. Create a new target group, and attach it to the new Network Load Balancer. Add each of the firewall appliance instances to the target group.
  • C. Create a new Gateway Load Balancer in the shared services VPCreate a new target group, and attach it to the new Gateway Load Balancer Add each of the firewall appliance instances to the target group.
  • D. Create a VPC interface endpoint. Add a route to the route table in the shared services VPC. Designate the new endpoint as the next hop for traffic that enters the shared services VPC from other VPCs.
  • E. Deploy two firewall appliances into the shared services VPC, each in the same Availability Zone.
  • F. Create a VPC Gateway Load Balancer endpoint. Add a route to the route table in the shared services VPC. Designate the new endpoint as the next hop for traffic that enters the shared services VPC from other VPCs.
Show Suggested Answer Hide Answer
Suggested Answer: ACF 🗳️
by airgead at Oct. 28, 2023, 1:47 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ayadmawla
Highly Voted 1 year, 4 months ago
Selected Answer: ACF
Need (A) two firewalls spread over two availability zones for HA and balanced by an NLB, then (C) a Gateway Load Balancer to interface to the virtual 3rd party network firewalls through the NLB, then (F) a Gateway Load Balancer EndPoint in the Consumer VPC with routes taking the traffic to the shared GLB + Firewalls A simple diagram is given here so you don't forget if you are visual like me :) https://docs.aws.amazon.com/elasticloadbalancing/latest/gateway/getting-started.html
upvoted 15 times
ayadmawla
1 year, 4 months ago
apologies, I meant balanced by the GLB (A)
upvoted 2 times
...
...
s61
Highly Voted 1 year, 6 months ago
Selected Answer: ACF
ACF https://docs.aws.amazon.com/vpc/latest/privatelink/create-gateway-load-balancer-endpoint-service.html
upvoted 6 times
...
TomTom
Most Recent 4 months, 4 weeks ago
Selected Answer: ABF
Why Not A,B,F? For option C, Using a Gateway Load Balancer is suitable for load balancing traffic entering the VPC, but it doesn't provide the same level of fault tolerance as a Network Load Balancer. Gateway Load Balancers are primarily used for routing traffic between VPCs.
upvoted 1 times
...
gfhbox0083
9 months, 2 weeks ago
Selected Answer: ACF
A, C, F for sure. Using Gateway Load Balancer for distributing traffic across multiple virtual appliances
upvoted 1 times
...
sarlos
11 months, 2 weeks ago
healthy virtual appliances means gateway load balancer.
upvoted 1 times
...
enk
1 year, 5 months ago
Selected Answer: ABD
Obviously A over E. GWLB's don't make good load balancers. Avoid C and F. Need NLB to minimize the failover time between the (2) 3rd party FW's.
upvoted 1 times
enk
1 year, 5 months ago
Well, I read a bit further on Gateway Load Balancers and a 3rd party firewall is the perfect scenario to use a GwLB. So, looks like the correct answers are ACF.
upvoted 2 times
...
...
Ustad
1 year, 5 months ago
Selected Answer: ACF
https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-gateway-load-balancer-supported-architecture-patterns/
upvoted 4 times
...
airgead
1 year, 6 months ago
Selected Answer: ACD
A: Use 2 firewall Apliances for each AZ C: Use GWLB for 3rd party appliances routing traffic D: nables the routing of outbound internet-bound traffic through the firewall appliances.
upvoted 2 times
KungLjao
1 year, 6 months ago
Why not gw endpoint?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago