NGFW-ENGINEER · Question #106
An organization is migrating its data center to Amazon Web Services (AWS) and needs to deploy VM-Series firewalls to inspect all ingress and egress traffic. The solution must provide both resilience…
The correct answer is C. Amazon EC2 Auto Scaling group with VM-Series firewalls and an Amazon Gateway Load. Using VM-Series firewalls in an EC2 Auto Scaling group provides horizontal scale-out across multiple Availability Zones, and placing them behind an Amazon Gateway Load Balancer enables resilient, distributed traffic insertion for centralized inspection of ingress and egress…
Question
An organization is migrating its data center to Amazon Web Services (AWS) and needs to deploy VM-Series firewalls to inspect all ingress and egress traffic. The solution must provide both resilience across multiple Availability Zones and the ability to scale horizontally. Which combination of AWS services and Palo Alto Networks components is required for this use case?
Options
- AAWS Lambda function that monitors the firewall's health and re-routes traffic using the AWS API
- BPAN-OS active/active high availability (HA) pair with an AWS Transit Gateway
- CAmazon EC2 Auto Scaling group with VM-Series firewalls and an Amazon Gateway Load
- DSingle VM-Series firewall with an Elastic IP address that can be re-associated upon failure
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- C83% (19)
- D4% (1)
Explanation
Using VM-Series firewalls in an EC2 Auto Scaling group provides horizontal scale-out across multiple Availability Zones, and placing them behind an Amazon Gateway Load Balancer enables resilient, distributed traffic insertion for centralized inspection of ingress and egress flows while supporting automatic scaling and failover.
Topics
Community Discussion
No community discussion yet for this question.