Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 64

What are the two appropriate routing settings required to deploy software firewall integration with Amazon Web Service (AWS) GWLB? (Choose two.)

Answer options

• A. Route table with ALB subnet association - Add route destined to 0.0.0.0/0 with target as NAT Gateway
• B. Route table with ALB subnet association - Add route destined to 0.0.0.0/0 with target as IGW
• C. Route table with IGW edge association - Add route destined to ALB with target as GWLBE
• D. Route table with GWLBE subnet association - Add route destined to 0.0.0.0/0 with target as IGW

Correct answer: A, D

Explanation

The correct configurations are A and D because they ensure that the traffic is properly routed through the NAT Gateway and IGW, facilitating the software firewall's integration with GWLB. Option B is incorrect as using an IGW for the route does not align with the NAT Gateway requirement, and option C does not pertain to the necessary associations for the ALB in this context.