SAP-C02 Exam - Question 312

Question

A company is deploying a third-party firewall appliance solution from AWS Marketplace to monitor and protect traffic that leaves the company's AWS environments. The company wants to deploy this appliance into a shared services VPC and route all outbound internet-bound traffic through the appliances.

A solutions architect needs to recommend a deployment method that prioritizes reliability and minimizes failover time between firewall appliances within a single AWS Region. The company has set up routing from the shared services VPC to other VPCs.

Which steps should the solutions architect recommend to meet these requirements? (Choose three.)

Examice · Accepted Answer

To ensure high availability and reliability while minimizing failover times, the deployment should involve multiple Availability Zones and use specialized AWS services. Deploying two firewall appliances in separate Availability Zones increases redundancy and fault tolerance. A Gateway Load Balancer (GWLB) is designed to handle traffic routing and balancing for virtual appliances like firewalls. A GWLB endpoint ensures that traffic from other VPCs can be routed to the firewall appliances effectively. These steps ensure that failover times are minimized and reliability is prioritized.

ayadmawla · Answer

Need (A) two firewalls spread over two availability zones for HA and balanced by an NLB, then (C) a Gateway Load Balancer to interface to the virtual 3rd party network firewalls through the NLB, then (F) a Gateway Load Balancer EndPoint in the Consumer VPC with routes taking the traffic to the shared GLB + Firewalls

A simple diagram is given here so you don't forget if you are visual like me :)
https://docs.aws.amazon.com/elasticloadbalancing/latest/gateway/getting-started.html

s61 · Answer

ACF
https://docs.aws.amazon.com/vpc/latest/privatelink/create-gateway-load-balancer-endpoint-service.html

Ustad · Answer

https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-gateway-load-balancer-supported-architecture-patterns/

airgead · Answer

A: Use 2 firewall Apliances  for each AZ
C: Use GWLB for 3rd party appliances routing traffic
D: nables the routing of outbound internet-bound traffic through the firewall appliances.

enk · Answer

Obviously A over E.  GWLB's don't make good load balancers.  Avoid C and F.  Need NLB to minimize the failover time between the (2) 3rd party FW's.

sarlos · Answer

healthy virtual appliances means gateway load balancer.

gfhbox0083 · Answer

A, C, F for sure.
Using Gateway Load Balancer for distributing traffic across multiple virtual appliances

SAP-C02 Exam - Question 312

Discussion