NSE7_PBC-7.2 · Question #3
Which two Amazon Web Services (AWS) topologies support east-west traffic inspection within the AWS cloud by the FortiGate VM? (Choose two.)
The correct answer is C. A multiple VPC deployment utilizing a transit VPC topology D. A multiple VPC deployment utilizing a transit gateway. Multi-VPC design. AWS recommends segmenting networks at the VPC level. In this approach, workloads are grouped together at the VPC level instead of the subnet level. All traffic between VPCs will be inspected by network security virtual firewalls at each VPC or at a shared VPC…
Question
Which two Amazon Web Services (AWS) topologies support east-west traffic inspection within the AWS cloud by the FortiGate VM? (Choose two.)
Options
- AA single VPC deployment with multiple subnets and a NAT gateway
- BA single VPC deployment with multiple subnets
- CA multiple VPC deployment utilizing a transit VPC topology
- DA multiple VPC deployment utilizing a transit gateway
How the community answered
(17 responses)- A6% (1)
- B18% (3)
- C76% (13)
Explanation
Multi-VPC design. AWS recommends segmenting networks at the VPC level. In this approach, workloads are grouped together at the VPC level instead of the subnet level. All traffic between VPCs will be inspected by network security virtual firewalls at each VPC or at a shared VPC. Design patterns such as Transit VPC or AWS Transit Gateway can be used to achieve this in an automated and scalable fashion.
Topics
Community Discussion
No community discussion yet for this question.