AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ104

Network Design

A company has VPCs in 50 AWS accounts and uses AWS Organizations. The company wants to implement web filtering, with identical traffic-filtering requirements for every VPC. A network engineer plans to use AWS Network Firewall and must implement a solution that minimizes the number of firewall policies and rule groups required for this web filtering.

Which combination of steps will satisfy these requirements?

Choose three
  • A Create a firewall policy or rule group in each account.
  • B Use SCPs to share the firewall policy or rule group.
  • C Create a firewall policy or rule group in the management account
  • D Use AWS Resource Access Manager (AWS RAM) to share the firewall policy or rule group.
  • E Enable sharing within Organizations.
  • F Create OUs to share the firewall policy or rule group.
Explanation

AWS Network Firewall firewall policies and rule groups can be created centrally and shared with other AWS accounts through AWS Resource Access Manager (AWS RAM). Sharing them with accounts in AWS Organizations requires enabling sharing within Organizations. This permits the same policy or rule groups to be reused across all accounts, rather than creating duplicates per account.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!