AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 98

Question

A company's existing AWS environment contains public application servers that run on Amazon EC2 instances. The application servers run in a VPC subnet. Each server is associated with an Elastic IP address. The company has a new requirement for firewall inspection of all traffic from the internet before the traffic reaches any EC2 instances. A security engineer has deployed and configured a Gateway Load Balancer (GLB) in a standalone VPC with a fleet of third-party firewalls. How should a network engineer update the environment to ensure that the traffic travels across the fleet of firewalls?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Provision a GLB endpoint in the application VPC in a new subnet. Create a gateway route table with a route that specifies the application subnet CIDR block as the destination and the GLB endpoint as the target. Associ...

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 98