nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #138

You need to set up two network segments: one with an untrusted subnet and the other with a trusted subnet. You want to configure a virtual appliance such as a next-generation firewall (NGFW) to…

The correct answer is D. 1. Set up two VPC networks: one trusted and the other untrusted. 2. Configure a virtual appliance. Multiple network interfaces. The simplest way to connect multiple VPC networks through a virtual appliance is by using multiple network interfaces, with each interface connecting to one of the VPC networks. Internet and on-premises connectivity is provided over one or two…

Submitted by skyler.x· Apr 18, 2026Configuring network security

Question

You need to set up two network segments: one with an untrusted subnet and the other with a trusted subnet. You want to configure a virtual appliance such as a next-generation firewall (NGFW) to inspect all traffic between the two network segments. How should you design the network to inspect the traffic?

Options

  • A
    1. Set up one VPC with two subnets: one trusted and the other untrusted. 2. Configure a custom
  • B
    1. Set up one VPC with two subnets: one trusted and the other untrusted. 2. Configure a custom
  • C
    1. Set up two VPC networks: one trusted and the other untrusted, and peer them together. 2.
  • D
    1. Set up two VPC networks: one trusted and the other untrusted. 2. Configure a virtual appliance

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    16% (5)
  • D
    75% (24)

Explanation

Multiple network interfaces. The simplest way to connect multiple VPC networks through a virtual appliance is by using multiple network interfaces, with each interface connecting to one of the VPC networks. Internet and on-premises connectivity is provided over one or two separate network interfaces. With many NGFW products, internet connectivity is connected through an interface marked as untrusted in the NGFW software.

Topics

#Network Segmentation#VPC Design#Next-Generation Firewall (NGFW)#Traffic Inspection

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice