SAP-C02 · Question #381
A financial company is planning to migrate its web application from on premises to AWS. The company uses a third-party security tool to monitor the inbound traffic to the application. The company has
The correct answer is A. Deploy the security tool on EC2 instances in a new Auto Scaling group in the existing VPC. D. Provision a Gateway Load Balancer for each Availability Zone to redirect the traffic to the security. Option A, Deploy the security tool on EC2 instances in a new Auto Scaling group in the existing VPC, allows the company to use its existing security tool while still running it within the AWS environment. This ensures that all packets coming in and out of the VPC are inspected by
Question
A financial company is planning to migrate its web application from on premises to AWS. The company uses a third-party security tool to monitor the inbound traffic to the application. The company has used the security tool for the last 15 years, and the tool has no cloud solutions available from its vendor. The company's security team is concerned about how to integrate the security tool with AWS technology. The company plans to deploy the application migration to AWS on Amazon EC2 instances. The EC2 instances will run in an Auto Scaling group in a dedicated VPC. The company needs to use the security tool to inspect all packets that come in and out of the VPC. This inspection must occur in real time and must not affect the application's performance. A solutions architect must design a target architecture on AWS that is highly available within an AWS Region. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)
Options
- ADeploy the security tool on EC2 instances in a new Auto Scaling group in the existing VPC.
- BDeploy the web application behind a Network Load Balancer.
- CDeploy an Application Load Balancer in front of the security tool instances.
- DProvision a Gateway Load Balancer for each Availability Zone to redirect the traffic to the security
- EProvision a transit gateway to facilitate communication between VPCs.
How the community answered
(18 responses)- A67% (12)
- B6% (1)
- C6% (1)
- E22% (4)
Explanation
Option A, Deploy the security tool on EC2 instances in a new Auto Scaling group in the existing VPC, allows the company to use its existing security tool while still running it within the AWS environment. This ensures that all packets coming in and out of the VPC are inspected by the security tool in real time. Option D, Provision a Gateway Load Balancer for each Availability Zone to redirect the traffic to the security tool, allows for high availability within an AWS Region. By provisioning a Gateway Load Balancer for each Availability Zone, the traffic is redirected to the security tool in the event of any failures or outages. This ensures that the security tool is always available to inspect the traffic, even in the event of a failure.
Community Discussion
No community discussion yet for this question.