AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 23

Question

A government contractor is designing a multi-account environment with multiple VPCs for a customer. A network security policy requires all traffic between any two VPCs to be transparently inspected by a third-party appliance. The customer wants a solution that features AWS Transit Gateway. The setup must be highly available across multiple Availability Zones, and the solution needs to support automated failover. Furthermore, asymmetric routing is not supported by the inspection appliances. Which combination of steps is part of a solution that meets these requirements? (Choose two.)

Accepted Answer

Correct answer: B, C. The correct answer is B, C. Option B: Deploy two clusters that consist of multiple appliances across multiple Availability Zones in a designated inspection VPC. Connect the inspection VPC to the transit gateway by using a VPC attachment. Create a target g... Option C: Configure two route tables on the transit gateway. Associate one route table with all the attachments of the application VPCs. Associate the other route table with the inspection VPC’s attachment. Propagate all VPC at... A Gateway Load Balancer inserts third-party virtual appliances transparently into the traffic path. A load balancer distributes traffic across targets in multiple AZs for availability and scale. AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 23