A security company wants to inspect all outgoing web traffic from their AWS VPC to ensure no sensitive data is being leaked. Which service allows them to implement a managed, stateful network firewall for their VPC?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Network Firewall

Network Firewall provides deep packet inspection (DPI), application protocol filtering, and intrusion prevention (IPS) at the network layer....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

A security company wants to inspect all outgoing web traffic from their AWS VPC to ensure no sensitive data is being leaked. Which service allows them to implement a managed, stateful network firewall for their VPC?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

AWS Network Firewall

Why This Answer Is Correct

Network Firewall provides deep packet inspection (DPI), application protocol filtering, and intrusion prevention (IPS) at the network layer.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.