ANS-C01 Question #163: Real Exam Question with Answer & Explanation

Question

A company's application is deployed on Amazon EC2 instances in a single VPC in an AWS Region. The EC2 instances are running in two Availability Zones. The company decides to use a fleet of traffic inspection instances from AWS Marketplace to inspect traffic between the VPC and the internet. The company is performing tests before the company deploys the architecture into production. The fleet is located in a shared inspection VPC behind a Gateway Load Balancer (GWLB). To minimize the cost of the solution, the company deployed only one inspection instance in each Availability Zone that the application uses. During tests, a network engineer notices that traffic inspection works as expected when the network is stable. However, during maintenance of the inspection instances, the internet sessions time out for some application instances. The application instances are not able to establish new sessions. Which combination of steps will remediate these issues? (Choose two.)

Options

• ADeploy one inspection instance in the Availability Zones that do not have inspection instances
• BDeploy one additional inspection instance in each Availability Zone where the inspection
• CEnable the cross-zone load balancing attribute for the GWLB.
• DDeploy inspection instances in an Auto Scaling group. Define a scaling policy that is based on
• EAttach the GWLB to all Availability Zones in the Region.