nerdexam
Amazon

ANS-C01 · Question #163

A company's application is deployed on Amazon EC2 instances in a single VPC in an AWS Region. The EC2 instances are running in two Availability Zones. The company decides to use a fleet of traffic…

The correct answer is B. Deploy one additional inspection instance in each Availability Zone where the inspection C. Enable the cross-zone load balancing attribute for the GWLB. https://aws.amazon.com/blogs/networking-and-content-delivery/centralized-inspection- architecture-with-aws-gateway-load-balancer-and-aws-transit-gateway/

Submitted by katya_ua· Mar 6, 2026Design and Implement Network Security

Question

A company's application is deployed on Amazon EC2 instances in a single VPC in an AWS Region. The EC2 instances are running in two Availability Zones. The company decides to use a fleet of traffic inspection instances from AWS Marketplace to inspect traffic between the VPC and the internet. The company is performing tests before the company deploys the architecture into production. The fleet is located in a shared inspection VPC behind a Gateway Load Balancer (GWLB). To minimize the cost of the solution, the company deployed only one inspection instance in each Availability Zone that the application uses. During tests, a network engineer notices that traffic inspection works as expected when the network is stable. However, during maintenance of the inspection instances, the internet sessions time out for some application instances. The application instances are not able to establish new sessions. Which combination of steps will remediate these issues? (Choose two.)

Options

  • ADeploy one inspection instance in the Availability Zones that do not have inspection instances
  • BDeploy one additional inspection instance in each Availability Zone where the inspection
  • CEnable the cross-zone load balancing attribute for the GWLB.
  • DDeploy inspection instances in an Auto Scaling group. Define a scaling policy that is based on
  • EAttach the GWLB to all Availability Zones in the Region.

How the community answered

(40 responses)
  • A
    13% (5)
  • B
    63% (25)
  • D
    5% (2)
  • E
    20% (8)

Explanation

https://aws.amazon.com/blogs/networking-and-content-delivery/centralized-inspection- architecture-with-aws-gateway-load-balancer-and-aws-transit-gateway/

Topics

#GWLB#Traffic inspection#High availability#Cross-zone load balancing

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice