Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series firewall? (Choose two.)

Transit Gateway and Security VPC: Using a transit gateway in conjunction with a Security VPC is a recommended design for outbound high 27/103 availability (HA) in AWS. This configuration ensures that traffic can be routed efficiently and securely through the VM-Series firewalls deployed in the Security VPC.
Reference: Palo Alto Networks provides best practices for using transit gateways and Security VPCs to enhance HA and security in AWS environments. Palo Alto Networks AWS Design Guide Transit VPC and Security VPC: Another recommended approach is to use a Transit VPC along with a Security VPC. The Transit VPC provides a centralized routing hub, while the Security VPC hosts the VM-Series firewalls to inspect and secure outbound traffic.
Reference: The design guide for AWS deployments recommends this architecture to achieve scalable and resilient HA configurations. Palo Alto Networks AWS Transit VPC Guide