An engineer is responsible for configuring a new firewall so

An engineer is responsible for configuring a new firewall so - CompTIA Cloud+ CV0-004

Question

An engineer is responsible for configuring a new firewall solution that will be deployed in a new public cloud environment. All traffic must pass through the firewall. The SLA for the firewall is 99.999%.
Which of the following should be deployed?

Answers

Two load balancers behind a single firewall
Firewalls in a blue-green configuration
correct

Two firewalls in a HA configuration
A web application firewall

Explanation

Correct Answer: C. Two firewalls in a HA configuration

To meet a 99.999% SLA requirement—equivalent to approximately 5.26 minutes of downtime per year—high availability (HA) is critical. Deploying two firewalls in a high availability (HA) configuration ensures redundancy and failover capabilities.

If one firewall fails or undergoes maintenance, the other can seamlessly take over traffic handling, ensuring continuous availability. This setup is essential in public cloud environments where downtime can severely affect accessibility and performance.

Why the Other Choices are Incorrect:

A. Two load balancers behind a single firewall: This setup creates a single point of failure at the firewall. If the firewall fails, traffic stops, violating the 99.999% SLA.
B. Firewalls in a blue-green configuration: Blue-green is used for application deployments, not for real-time failover or redundancy. It doesn’t provide automatic failover for continuous uptime.
D. A web application firewall: A WAF protects against application-layer attacks but does not replace a traditional network firewall or ensure HA. It lacks full traffic control and HA capabilities.

Easy way to pass your test within a week with prepsaret

You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams

View Courses Offered