Amazon Exam ANS-C01 Topic 2 Question 16 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 16
Topic #: 2

A company is deploying third-party firewall appliances for traffic inspection and NAT capabilities in its VPC. The VPC is configured with private subnets and public subnets. The company needs to deploy the firewall appliances behind a load balancer.

Which architecture will meet these requirements MOST cost-effectively?

ADeploy a Gateway Load Balancer with the firewall appliances as targets. Configure the firewall appliances with a single network interface in a private subnet. Use a NAT gateway to send the traffic to the internet after inspection.

BDeploy a Gateway Load Balancer with the firewall appliances as targets. Configure the firewall appliances with two network interfaces: one network interface in a private subnet and another network interface in a public subnet. Use the NAT functionality on the firewall appliances to send the traffic to the internet after inspection.

CDeploy a Network Load Balancer with the firewall appliances as targets. Configure the firewall appliances with a single network interface in a private subnet. Use a NAT gateway to send the traffic to the internet after inspection.

DDeploy a Network Load Balancer with the firewall appliances as targets. Configure the firewall appliances with two network interfaces: one network interface in a private subnet and another network interface in a public subnet. Use the NAT functionality on the firewall appliances to send the traffic to the internet after inspection.

Show Suggested Answer

Suggested Answer: B

by Lenna at Nov 24, 2023, 09:12 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Francis

7 months ago

I'm leaning towards option D. The Network Load Balancer paired with the dual-NIC firewall appliances seems like a solid architecture. Plus, using the NAT functionality on the firewall appliances could be more efficient than relying on a separate NAT gateway. Although, the cost-effectiveness aspect is still a bit unclear to me.

upvoted 0 times

...

Theron

7 months ago

Hmm, I'm not sure. Option A with the NAT gateway might be a bit simpler and potentially more cost-effective. But then again, the dual-NIC approach in option B could provide better performance and scalability. This is a tough one, I'll have to think it through carefully.

upvoted 0 times

...

Ellsworth

7 months ago

I agree, option B looks like the best choice here. Having the firewall appliances with two network interfaces, one in the private subnet and one in the public subnet, allows for more control and flexibility in terms of traffic routing and NAT. The Gateway Load Balancer also seems like the appropriate choice for this use case.

upvoted 0 times

...

7 months ago

I think option B is the best choice as well. It provides more flexibility with the dual-NIC configuration for the firewall appliances.

upvoted 0 times

...