Answer-first summary for fast verification
Answer: Modify the transit gateway VPC attachment on the shared services VPC by enabling cross-Availability Zone load balancing.
The issue described involves intermittent connections for traffic that crosses Availability Zones after configuring routing through a transit gateway for traffic inspection. The key to resolving this issue lies in ensuring that traffic is properly balanced and inspected across the IDS services deployed in the shared services VPC. Option A suggests enabling cross-Availability Zone load balancing on the transit gateway VPC attachment for the shared services VPC. This would help in distributing traffic evenly across the IDS instances in different Availability Zones, potentially resolving the intermittent connectivity issues. Option B, enabling appliance mode support, is not directly related to balancing traffic across Availability Zones but rather to ensuring that traffic flows through the appliance (in this case, the IDS services) in a consistent manner, which is already implied by the setup. Options C and D, enabling VPN ECMP routing support and multicast support, respectively, are not relevant to the issue of traffic inspection and balancing across Availability Zones. Therefore, the most appropriate action to resolve the described issue is to enable cross-Availability Zone load balancing on the transit gateway VPC attachment for the shared services VPC.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A company with multiple AWS accounts, each containing one or more VPCs, has implemented a new security requirement to inspect all inter-VPC traffic. They have deployed a transit gateway to connect all VPCs and a shared services VPC with Amazon EC2 instances running IDS services for stateful inspection, distributed across three Availability Zones. VPC associations and routing have been configured on the transit gateway, and a few test VPCs have been migrated to this solution. However, after routing setup, intermittent connectivity issues are reported for traffic crossing Availability Zones. What steps should a network engineer take to resolve this issue?
A
Modify the transit gateway VPC attachment on the shared services VPC by enabling cross-Availability Zone load balancing.
B
Modify the transit gateway VPC attachment on the shared services VPC by enabling appliance mode support.
C
Modify the transit gateway by selecting VPN equal-cost multi-path (ECMP) routing support.
D
Modify the transit gateway by selecting multicast support.
No comments yet.