An enterprise is building a centralized network inspection architecture using AWS Transit Gateway. They have a dedicated Inspection VPC containing AWS Network Firewall. They want to ensure that traffic between any two application VPCs is routed through the Inspection VPC. How should the Transit Gateway route tables be configured?

Answer options:

Use a single TGW route table and enable appliance mode on all VPC attachments.

Create two TGW route tables. Associate application VPCs with a route table that routes all traffic to the Inspection VPC. Associate the Inspection VPC with a route table that has routes to all application VPCs.

Configure VPC peering between all application VPCs and the Inspection VPC.

Enable AWS Shield Advanced on the Transit Gateway.

How to approach this question

Understand Transit Gateway route table isolation.

Full Answer

B.Create two TGW route tables. Associate application VPCs with a route table that routes all traffic to the Inspection VPC. Associate the Inspection VPC with a route table that has routes to all application VPCs.✓ Correct

To route traffic through a central inspection VPC, you need at least two Transit Gateway route tables. One for the spoke VPCs (routing everything to the inspection VPC) and one for the inspection VPC (routing traffic to its final destination).

Common mistakes

Trying to use a single route table, which creates a loop.

Question 55 All questions Question 57

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7

75 questions · hints · full answers · grading

More questions from this exam

Q01A global enterprise is designing a multi-region network architecture connecting 50 AWS accounts a...Hard Q02A company is migrating its hybrid network to AWS. They have two 10 Gbps AWS Direct Connect connec...Hard Q03An enterprise has 100 AWS accounts in AWS Organizations. The security team mandates that all Amaz...Medium Q04A financial company requires that all EBS volumes, S3 buckets, and RDS databases be encrypted usi...Easy Q05An enterprise is designing a disaster recovery strategy for a critical application running on Ama...Hard

View all 75 questions →