ANS-C01 Question 44

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  C is the correct answer. Appliance mode needs to be enabled on the shared VPC where the stateful inspection appliance resides.

• 1

  the answer is C - The reason is that the appliance mode will avoid having asymmetric flows. With asymmetric flows the firewall will drop the traffic

• Chose B1

  Enabling transit gateway appliance mode on the VPC attachment in VPC A and VPC B allows the traffic between the Availability Zones to be processed by the firewall appliance. This mode is specifically designed to handle scenarios where traffic needs to be inspected by a security appliance before being routed to its final destination. It provides a straightforward solution without the need for additional VPNs or VPC peering connections. Option A involves replacing the VPC attachment with a VPN attachment and creating a VPN tunnel, which introduces additional complexity. Option C involves enabling appliance mode only on the shared VPC attachment, which might not address the specific issue related to traffic between Availability Zones. Option D suggests using VPC peering connections, which may not be the most efficient solution for this scenario.