NGFW-ENGINEER Question #42: Real Exam Question with Answer & Explanation

Question

To maintain security efficacy of its public cloud resources by using native tools, a company purchases Cloud NGFW credits to replicate the Panorama, PA-Series, and VM-Series devices used in physical data centers. Resources exist on AWS and Azure: - The AWS deployment is architected with AWS Transit Gateway, to which all resources connect - The Azure deployment is architected with each application independently routing traffic The engineer deploying Cloud NGFW in these two cloud environments must account for the following: - Minimize changes to the two cloud environments - Scale to the demands of the applications while using the least amount of compute resources - Allow the company to unify the Security policies across all protected areas Which two implementations will meet these requirements? (Choose two.)

Options

• ADeploy a VM-Series firewall in AWS in each VPC, create an IPSec tunnel between AWS and
• BDeploy Cloud NGFW for Azure in vNET/s, update the vNET/s routing to path traffic through the
• CDeploy Cloud NGFW for Azure in vWAN, create a vWAN to route all appropriate traffic to the
• DDeploy Cloud NGFW for AWS in a centralized Security VPC, update the Transit Gateway to route