nerdexam
Amazon

ANS-C01 · Question #23

A government contractor is designing a multi-account environment with multiple VPCs for a customer. A network security policy requires all traffic between any two VPCs to be transparently inspected…

The correct answer is B. Deploy two clusters that consist of multiple appliances across multiple Availability Zones in a C. Configure two route tables on the transit gateway. Associate one route table with all the. https://docs.aws.amazon.com/elasticloadbalancing/latest/gateway/introduction.html https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network- infrastructure/using-gwlb-with-tg-for-cns.html

Submitted by kev92· Mar 6, 2026Network Design for New and Existing Solutions

Question

A government contractor is designing a multi-account environment with multiple VPCs for a customer. A network security policy requires all traffic between any two VPCs to be transparently inspected by a third-party appliance. The customer wants a solution that features AWS Transit Gateway. The setup must be highly available across multiple Availability Zones, and the solution needs to support automated failover. Furthermore, asymmetric routing is not supported by the inspection appliances. Which combination of steps is part of a solution that meets these requirements? (Choose two.)

Options

  • ADeploy two clusters that consist of multiple appliances across multiple Availability Zones in a
  • BDeploy two clusters that consist of multiple appliances across multiple Availability Zones in a
  • CConfigure two route tables on the transit gateway. Associate one route table with all the
  • DConfigure two route tables on the transit gateway. Associate one route table with all the
  • EConfigure one route table on the transit gateway. Associate the route table with all the VPCs.

How the community answered

(38 responses)
  • A
    24% (9)
  • B
    61% (23)
  • D
    11% (4)
  • E
    5% (2)

Explanation

https://docs.aws.amazon.com/elasticloadbalancing/latest/gateway/introduction.html https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network- infrastructure/using-gwlb-with-tg-for-cns.html

Topics

#AWS Transit Gateway#TGW routing#Network inspection#High availability design

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ANS-C01 Practice