The customer has an Amazon Web Services Elastic Computing Cloud that provides a service to the internet directly and needs to secure that cloud with a VM-Series NGFW. Which component handles address…

Question

Options

• AThe server VMs have private use only (RFC 1918) IPs. Amazon's cloud infrastructure translates
• BThe server VMs have private use only (RFC 1918) IPs. The VM-Series NGFW translates those
• CThe server VMs and the VM-Series NGFW have private use only (RFC 1918) IPs. Amazons cloud
• DThe servers and VM-Series NGFW have publicly accessible IP addresses for management

• A
  4% (1)
• B
  13% (3)
• C
  75% (18)
• D
  8% (2)

Explanation

In AWS, all EC2 instances - including the VM-Series NGFW itself - are assigned private RFC 1918 addresses; AWS's Internet Gateway performs the 1-to-1 NAT (via Elastic IPs) between the public internet and those private addresses, making option C correct. Option A is wrong because it implies only the server VMs have private IPs, suggesting the NGFW holds a public IP, which is not how AWS networking works. Option B is wrong because the VM-Series NGFW is not the NAT device in this model - AWS infrastructure handles that translation before traffic even reaches the NGFW's interface. Option D is wrong because EC2 instances are never directly assigned routable public IPs; public Elastic IPs are mapped externally by AWS, not held on the instance itself.

Memory tip: In AWS, think "nobody gets a real public IP" - the Internet Gateway is always the NAT middleman, so both your protected servers and your NGFW live in RFC 1918 space, and Amazon's infrastructure owns the translation layer.

No community discussion yet for this question.