Exam AWS Certified Solutions Architect - Professional topic 1 question 844 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 844
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company's AWS environments. The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances.
A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single
AWS Region. The company has set up routing from the shared services VPC to other VPCs.
Which steps should the solutions architect recommend to meet these requirements? (Choose three.)

A. Deploy two firewall appliances into the shared services VPC, each in a separate Availability Zone.
B. Create a new Network Load Balancer in the shared services VPC. Create a new target group, and attach it to the new Network Load Balancer. Add each of the firewall appliance instances to the target group.
C. Create a new Gateway Load Balancer in the shared services VPC. Create a new target group, and attach it to the new Gateway Load Balancer. Add each of the firewall appliance instances to the target group.
D. Create a VPC interface endpoint. Add a route to the route table in the shared services VPC. Designate the new endpoint as the next hop for traffic that enters the shared services VPC from other VPCs.
E. Deploy two firewall appliances into the shared services VPC, each in the same Availability Zone.
F. Create a VPC Gateway Load Balancer endpoint. Add a route to the route table in the shared services VPC. Designate the new endpoint as the next hop for traffic that enters the shared services VPC from other VPCs.

Show Suggested Answer

Suggested Answer: ACF 🗳️

by snakecharmer2 at April 22, 2022, 6:57 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

snakecharmer2

Highly Voted 2 years, 7 months ago

Selected Answer: ACF

A - multi-az for the firewall appliances C - gateway LB for the routing F - gateway LB endpoint to route the traffic to the gateway LB See these url: https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoint-services-gwlbe.html https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-gateway-load-balancer.html

upvoted 18 times

...

Ni_yot

Highly Voted 2 years, 3 months ago

tough question. i have a headache reading this one.

upvoted 6 times

rajvee

2 years, 3 months ago

was the examtopics questions relevant? in your exam

upvoted 3 times

...

asfsdfsdf

Most Recent 2 years, 4 months ago

Selected Answer: ACF

ACF GW LB EP -> GW LB -> FW appliances

upvoted 1 times

...

Exam AWS Certified Solutions Architect - Professional All Questions

View all questions & answers for the AWS Certified Solutions Architect - Professional exam