Examtopics

AWS Certified Advanced Networking - Specialty

  • Topic 1 Question 44

    A company has hundreds of Amazon EC2 instances that are running in two production VPCs across all Availability Zones in the us-east-1 Region. The production VPCs are named VPC A and VPC B. A new security regulation requires all traffic between production VPCs to be inspected before the traffic is routed to its final destination. The company deploys a new shared VPC that contains a stateful firewall appliance and a transit gateway with a VPC attachment across all VPCs to route traffic between VPC A and VPC B through the firewall appliance for inspection. During testing, the company notices that the transit gateway is dropping the traffic whenever the traffic is between two Availability Zones. What should a network engineer do to fix this issue with the LEAST management overhead?

    • In the shared VPC, replace the VPC attachment with a VPN attachment. Create a VPN tunnel between the transit gateway and the firewall appliance. Configure BGP.

    • Enable transit gateway appliance mode on the VPC attachment in VPC A and VPC B.

    • Enable transit gateway appliance mode on the VPC attachment in the shared VPC.

    • In the shared VPC, configure one VPC peering connection to VPC A and another VPC peering connection to VPC B.

    シャッフルモード