Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 95

In the Cloud NGFW for Amazon Web Services (AWS) centralized inbound deployment architecture, what is the next hop for the traffic after it passes through the application load balancer (ALB)?

Answer options

• A. Ingress VPC TGW ENI
• B. Internet gateway
• C. Egress VPC TGW ENI
• D. AWS Transit Gateway •

Correct answer: A

Explanation

The correct answer is A, Ingress VPC TGW ENI, as it serves as the next hop for traffic following the application load balancer in the centralized deployment model. The other options, such as the Internet gateway and Egress VPC TGW ENI, do not represent the correct routing path after the ALB, while AWS Transit Gateway is related but not the immediate next hop in this context.