Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS is retiring this exam on Dec 31, 2026.
Question 23 of 198
Free Preview · 198 of 657 · questions 1–198 of 657 are free. Sign up free to sync your progress across devices.
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The critical issue with D is that it does not propagate the application VPC attachments into the inspection route table. Without this propagation, the inspection VPC will not know how to route traffic back to the originating application VPCs after it has been inspected.
BC are the correct answers. We need to used GWLB to load-balance the traffic to a target group of inspection appliance. Routes toward Applications VPCs need to be propagated and being reachable through their respective TGW attachment. Enable appliance mode to avoid asymmetric routing due to zone affinity.
When application VPC wants to reach other app VPC via TGW, there should be default route pointed to inspection TGW attchement and when traffic traffic comes back to TGW after inspection/GWLB, TGW needs specific routes to app VPC CIDRs.