ANS-C01 Question 83

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  This solution meets the requirements most cost-effectively because: It uses a Gateway Load Balancer, which is free of charge for AWS services (it's just an instance of a free service provided by AWS). The firewall appliances are configured with two network interfaces: one in a private subnet and another in a public subnet. This allows the firewall appliances to inspect traffic coming from both the internet and the VPC without requiring additional NAT configurations. By using the NAT functionality on the firewall appliances, you can send traffic to the internet after inspection, meeting the requirements for both third-party firewall appliances and the need to deploy them behind a load balancer.

• 1

  B is correct for applliances!

• Chose B1

  Firewall for "Traffic inspection" and "Nat capablities" ==> Two arm mode