A systems engineer is troubleshooting the connectivity of a test environment that includes a virtual security appliance deployed inline. In addition to using the virtual security appliance, the development team wants to use security groups and network ACLs to accomplish various security requirements in the environment. What configuration is necessary to allow the virtual security appliance to route the traffic?

Topic #: - All AWS Certified Security - Specialty SCS-C02 Questions

A. Disable network ACLs.
B. Configure the security appliance’s elastic network interface for promiscuous mode.
C. Disable the Network Source/Destination check on the security appliance’s elastic network interface.
D. Place the security appliance in the public subnet with the internet gateway.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Reference Material:

Suggested Answer:

Reference Material:

Share this post

Join the Discussion