Courseiva
Network Security, Compliance and GovernanceeasyMultiple ChoiceObjective-mapped

ANS-C01 AWS Firewall Manager Practice Question

A company wants to centrally manage firewall rules across multiple VPCs in different AWS accounts. Which AWS service should they use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

AWS Network Firewall with AWS Firewall Manager

AWS Network Firewall can be centrally managed using AWS Firewall Manager, which provides a single pane of glass to apply firewall rules across multiple VPCs and accounts. Option B is wrong because Security Groups are per-VPC and not centrally managed. Option C is wrong because AWS WAF is for web application layer protection, not network firewall. Option D is wrong because Network ACLs are per-subnet and cannot be centrally managed across accounts.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • AWS Network Firewall with AWS Firewall Manager

    Why this is correct

    AWS Network Firewall provides centralized management through Firewall Manager.

  • Security Groups

    Why it's wrong here

    Security Groups are managed per VPC and do not provide central management across accounts.

  • AWS WAF

    Why it's wrong here

    AWS WAF is for web application firewall, not network-level firewall.

  • Network ACLs

    Why it's wrong here

    Network ACLs are per subnet and not centrally managed.

Visual reference

192.168.1.0 /24 256 addresses (254 usable) 192.168.1.0 /25 Subnet A 128 addr (126 usable) 192.168.1.128 /25 Subnet B 128 addr (126 usable) Borrowing 1 bit from host portion creates 2 subnets (/25)

About these practice questions

One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.