nerdexam
Amazon

ANS-C01 · Question #239

A company has VPCs across 50 AWS accounts and is using AWS Organizations. The company wants to implement web filtering. The requirements for how the traffic must be filtered are the same for all the V

Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #239. The question stem and answer options stay visible for context.

Submitted by noor.lb· Mar 6, 2026Network Security

Question

A company has VPCs across 50 AWS accounts and is using AWS Organizations. The company wants to implement web filtering. The requirements for how the traffic must be filtered are the same for all the VPCs. A network engineer plans to use AWS Network Firewall. The network engineer needs to implement a solution that minimizes the number of firewall policies and rule groups that are necessary for this web filtering. Which combination of steps will meet these requirements? (Choose three.)

Options

  • ACreate a firewall policy or rule group in each account.
  • BUse SCPs to share the firewall policy or rule group.
  • CCreate a firewall policy or rule group in the management account
  • DUse AWS Resource Access Manager (AWS RAM) to share the firewall policy or rule group.
  • EEnable sharing within Organizations.
  • FCreate OUs to share the firewall policy or rule group.

Unlock ANS-C01 to see the answer

You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#AWS Network Firewall#AWS Organizations#AWS Resource Access Manager (RAM)#Centralized Network Security
Full ANS-C01 Practice