AWS · SAP-C03
Network security and global routing
SAP-C03 · Lesson 8 of 28 · 1:05:11
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAP-C03 exam (AWS Certified Solutions Architect – Professional). In this lesson: security groups, network ACLs, and flow logs, centralized inspection with Network Firewall and Gateway Load Balancers, web application protection with AWS WAF and Shield, and global traffic routing with Route 53 and Global Accelerator. Includes three original practice questions.
Preview the topics
- After the bank centralized Network Firewall behind its transit gateway, some connections between VPCs in different Availability Zones are dropped by the firewall. What should the architect change?
- The portal’s login page receives thousands of password attempts a minute from a few hundred addresses that change every day. What should the architect configure?
- Card terminals connect over TCP to two IP addresses fixed in their firmware, and the service must fail over between two Regions with no change to the terminals. What should the architect use?