Amazon ANS-C01 Exam - Topic 4 Question 72 Discussion

Question

A consulting company manages AWS accounts for its customers. One of the company's customers needs to add intrusion prevention for its environment without having to re-architect the environment. The customer's environment includes five VPCs in two AWS Regions in the United States. VPC-to-VPC connectivity is achieved through VPC peering. The customer does not plan to increase the number of VPCs within the next 2 years. The solution must accommodate unencrypted traffic.

Which solution will meet these requirements?

Torie · Accepted Answer

C) Use an AWS Network Firewall distributed deployment model in each VPC.

Torie · Answer

A) Configure VPC security groups and network ACLs.

Torie · Answer

B) Use an AWS Network Firewall centralized deployment model in each VPC.

Torie · Answer

D) Deploy AWS Shield in each VPC.