Your frontend application VMs and your backend database VMs are all deployed in the same VPC but across different subnets. Global network firewall policy rules are configured to allow traffic from…

Question

Options

• APlace your NVAs behind an internal passthrough Network Load Balancer named ILB1. Add the
• BPlace your NVAs behind an internal passthrough Network Load Balancer named ILB1. Add global
• CCreate your NVA with multiple interfaces. Configure NIC0 for NVA in the backend subnet.
• DPlace your NVAs behind an internal passthrough Network Load Balancer named ILB1. Add global

• A
  4% (1)
• B
  8% (2)
• C
  4% (1)
• D
  85% (22)

Explanation

Internal Passthrough Network Load Balancer (ILB): By placing the NVAs behind an internal passthrough Network Load Balancer (ILB), you ensure that traffic between subnets is directed through the NVAs. ILBs handle load balancing and ensure scalability of the inspection process. Policy-Based Routing (PBR): A PBR allows you to route traffic based on specific criteria such as the source IP range (frontend VM subnet) and destination IP range (backend VM subnet). The next hop is set to the ILB, directing traffic through the NVAs for inspection. Frontend Network Tag: Applying the PBR to VMs with the frontend network tag ensures that only traffic originating from the frontend VMs is routed through the NVAs, aligning with the requirement to inspect traffic from frontend to backend VMs. Global Network Firewall Policy Rules: Configuring global network firewall rules ensures that traffic through the NVAs is allowed and not blocked by any restrictive firewall policies.

No community discussion yet for this question.