ANS-C01 Question #246: Real Exam Question with Answer & Explanation

Question

A company is using third-party firewall appliances to monitor and inspect traffic on premises. The company wants to use the same model on AWS. The Company has a single VPC with an internet gateway. The VPC has a fleet of web servers that run on Amazon EC2 instances that are managed by an Auto Scaling group. The company's network team needs to work with the security team to establish inline inspection of all packets that are sent to and from the web servers. The solution must scale as the fleet of virtual firewall appliances scales Which combination of steps should the network team take to implement this solution? (Choose three.)

Options

• ACreate a new VPC, and deploy a fleet of firewall appliances. Create a Gateway Load Balancer.
• BCreate a security group for use with the firewall appliances, and allow port 443. Allow a port for
• CCreate a security group for use with the firewall appliances, and allow port 6081. Allow a port for
• DDeploy a fleet of firewall appliances to the existing VPC. Create a Gateway Load Balancer. Add
• EUpdate the internet gateway route table and the web server route table to send traffic to and from
• FCreate a new route table inside the web server VPC. Create a new edge association with the