Examice

Refer to the exhibit.

How would an administrator accomplish the given configuration leveraging the firewall capabilities within VMware Cloud on AWS?

✑ Create a gateway firewall rule permitting bi-directional traffic to Subnet A from the Internet.

✑ Create a gateway firewall rule denying bi-directional traffic to Subnet B and Suubnet C from the Internet.

✑ Create a distributed firewall rule under the Application category to permit bi-directional traffic from Subnet A to Subnet B and from Subnet B to Subnet C.

✑ Create a gateway firewall rule permitting bi-directional traffic to Subnet A from the Internet.

✑ Create a distributed firewall rule denying bi-directional traffic to Subnet B and Subnet C from the Internet.

✑ Create a distributed firewall rule under the Ethernet category to permit bi-directional traffic from Subnet A to Subnet B and from Subnet B to Subnet C.

✑ Create a gateway firewall rule permitting bi-directional traffic to Subnet A from the Internet.

✑ Create a gateway firewall rule denying bi-directional traffic from the Internet to all subnets.

✑ Create a distributed firewall rule under the Infrastructure category to permit bi-directional traffic from Subnet A to Subnet B and from Subnet B to Subnet C.

✑ Create a gateway firewall rule permitting bi-directional traffic to Subnet A from the Internet.

✑ Create a gateway firewall rule denying bi-directional traffic to Subnet B and Subnet C from the Internet.

Create a gateway firewall rule to permit bi-directional traffic from Subnet A to Subnet B and from Subnet B to Subnet C.

Correct Answer:

To achieve the described configuration in VMware Cloud on AWS, the following steps should be taken: 1. Create a gateway firewall rule permitting bi-directional traffic from the Internet to Subnet A to allow external access to the web servers. 2. Create a gateway firewall rule denying bi-directional traffic from the Internet to Subnet B and Subnet C to ensure these subnets remain protected from external access. 3. To allow internal communication, create a distributed firewall rule under the Application category permitting bi-directional traffic from Subnet A to Subnet B and from Subnet B to Subnet C, enabling necessary application-level interactions between these subnets. Therefore, the correct answer aligns with option A, which comprehensively uses both gateway and distributed firewall rules to manage both north-south and east-west traffic within the network.