ANS-C01 · Question #128
A company's existing AWS environment contains public application servers that run on Amazon EC2 instances. The application servers run in a VPC subnet. Each server is associated with an Elastic IP…
The correct answer is C. Provision a GLB endpoint in the application VPC in a new subnet. Create a gateway route table. We need a ingress route table associated with IGW for traffic coming from Internet and routed towards F/W subnet.
Question
A company's existing AWS environment contains public application servers that run on Amazon EC2 instances. The application servers run in a VPC subnet. Each server is associated with an Elastic IP address. The company has a new requirement for firewall inspection of all traffic from the internet before the traffic reaches any EC2 instances. A security engineer has deployed and configured a Gateway Load Balancer (GLB) in a standalone VPC with a fleet of third-party firewalls. How should a network engineer update the environment to ensure that the traffic travels across the fleet of firewalls?
Options
- ADeploy a transit gateway. Attach a GLB endpoint to the transit gateway. Attach the application
- BUpdate the application subnet route table to have a default route to the GLOn the standalone
- CProvision a GLB endpoint in the application VPC in a new subnet. Create a gateway route table
- DInstruct the security engineer to move the GLB into the application VPC. Create a gateway route
How the community answered
(30 responses)- A3% (1)
- B20% (6)
- C70% (21)
- D7% (2)
Explanation
We need a ingress route table associated with IGW for traffic coming from Internet and routed towards F/W subnet.
Topics
Community Discussion
No community discussion yet for this question.