nerdexam
Amazon

SAP-C02 · Question #220

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company's AWS environments. The company wants to deploy this…

The correct answer is A. Deploy two firewall appliances into the shared services VPC, each in a separate Availability Zone. C. Create a new Gateway Load Balancer in the shared services VPC. Create a new target group, F. Create a VPC Gateway Load Balancer endpoint. Add a route to the route table in the shared. A - multi-az for the firewall appliances C - gateway LB for the routing F - gateway LB endpoint to route the traffic to the gateway LB https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoint-services-gwlbe.html…

Submitted by suresh_in· Mar 6, 2026Design Solutions for Organizational Complexity

Question

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company's AWS environments. The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances. A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single AWS Region. The company has set up routing from the shared services VPC to other VPCs. Which steps should the solutions architect recommend to meet these requirements? (Choose three.)

Options

  • ADeploy two firewall appliances into the shared services VPC, each in a separate Availability Zone.
  • BCreate a new Network Load Balancer in the shared services VPC. Create a new target group,
  • CCreate a new Gateway Load Balancer in the shared services VPC. Create a new target group,
  • DCreate a VPC interface endpoint. Add a route to the route table in the shared services VPC.
  • EDeploy two firewall appliances into the shared services VPC, each in the same Availability Zone.
  • FCreate a VPC Gateway Load Balancer endpoint. Add a route to the route table in the shared

How the community answered

(55 responses)
  • A
    64% (35)
  • B
    20% (11)
  • D
    5% (3)
  • E
    11% (6)

Explanation

A - multi-az for the firewall appliances C - gateway LB for the routing F - gateway LB endpoint to route the traffic to the gateway LB https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoint-services-gwlbe.html https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-gateway-load-balancer.html

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice