AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ285

Network Management and Operation

A company's application is deployed on Amazon EC2 instances in a single VPC within an AWS Region. The EC2 instances run in two Availability Zones. The company decides to use a fleet of traffic-inspection instances from AWS Marketplace to inspect traffic between the VPC and the internet. The company is conducting tests before deploying the architecture to production.

The fleet is in a shared inspection VPC behind a Gateway Load Balancer (GWLB). To minimize solution cost, the company deployed only one inspection instance in each Availability Zone used by the application.

During testing, a network engineer observes that traffic inspection functions as expected while the network is stable. However, when the inspection instances undergo maintenance, internet sessions time out for some application instances. The application instances cannot establish new sessions.

Which combination of steps will remediate these issues?

Choose two
  • A Deploy one inspection instance in the Availability Zones that do not have inspection instances deployed.
  • B Deploy one additional inspection instance in each Availability Zone where the inspection instances are deployed.
  • C Enable the cross-zone load balancing attribute for the GWLB.
  • D Deploy inspection instances in an Auto Scaling group. Define a scaling policy that is based on CPU load.
  • E Attach the GWLB to all Availability Zones in the Region.
Explanation

Gateway Load Balancer uses flow stickiness, so an existing flow remains associated with its original appliance even after that appliance becomes unhealthy. New flows are routed only to healthy targets. Adding another inspection instance to each application Availability Zone supplies local healthy-target redundancy during maintenance. Gateway Load Balancer cross-zone load balancing is disabled by default; enabling it lets each GWLB node route new flows to healthy targets in all enabled Availability Zones, preventing a maintenance event in one zone from leaving that node without a healthy appliance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!