Examtopics

AWS Certified Advanced Networking - Specialty

  • Topic 1 Question 133

    A company's application is deployed on Amazon EC2 instances in a single VPC in an AWS Region. The EC2 instances are running in two Availability Zones. The company decides to use a fleet of traffic inspection instances from AWS Marketplace to inspect traffic between the VPC and the internet. The company is performing tests before the company deploys the architecture into production.

    The fleet is located in a shared inspection VPC behind a Gateway Load Balancer (GWLB). To minimize the cost of the solution, the company deployed only one inspection instance in each Availability Zone that the application uses.

    During tests, a network engineer notices that traffic inspection works as expected when the network is stable. However, during maintenance of the inspection instances, the internet sessions time out for some application instances. The application instances are not able to establish new sessions.

    Which combination of steps will remediate these issues?

    2 つ選択

    • Deploy one inspection instance in the Availability Zones that do not have inspection instances deployed.

    • Deploy one additional inspection instance in each Availability Zone where the inspection instances are deployed.

    • Enable the cross-zone load balancing attribute for the GWLB.

    • Deploy inspection instances in an Auto Scaling group. Define a scaling policy that is based on CPU load.

    • Attach the GWLB to all Availability Zones in the Region.

    シャッフルモード