An organization wants to implement 'Zero Trust' networking for their hybrid cloud environment and wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which AWS service fits?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Transit Gateway (with Network Firewall integration)

Transit Gateway acts as a central hub, and integrated with Network Firewall, provides a secure global transit architecture....

📋Part of AWS Certified DevOps Engineer – Professional (DOP-C02) · AWS Certification Practice
Real Exam ScenarioScenario Based

An organization wants to implement 'Zero Trust' networking for their hybrid cloud environment and wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which AWS service fits?

✓ Correct Answer & ExplanationScenario Based

Correct Answer

AWS Transit Gateway (with Network Firewall integration)

Why This Answer Is Correct

Transit Gateway acts as a central hub, and integrated with Network Firewall, provides a secure global transit architecture.

📚 What This Question Tests

This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified DevOps Engineer – Professional (DOP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.