A company has stateful security appliances that are deployed to multiple Availability Zones in a centralized s

Question

A company has stateful security appliances that are deployed to multiple Availability Zones in a centralized shared services VPC. The AWS
Environment includes a transit gateway that is attached to application VPCs and the shared services VPC. The application VPCs have workloads
That are deployed in private subnets across multiple Availability Zones. The stateful appliances in the shared services VPC inspect all east west
(VPC-to-VPC) tra¨c.
Users report that inter-VPC tra¨c to different Availability Zones is dropping. A network engineer veri¦ed this claim by issuing Internet Control
Message Protocol (ICMP) pings between workloads in different Availability Zones across the application VPCs. The network engineer has ruled
Out security groups, stateful device con¦gurations and network ACLs as the cause of the dropped tra¨c 
What is causing the tra¨c to drop?

Accepted Answer

B. Appliance mode is not enabled on the transit gateway attachment to the shared services VPC.

Answer

A. The stateful appliances and the transit gateway attachments are deployed in a separate subnet in the shared services VPC.

Answer

C. The stateful appliances and the transit gateway attachments are deployed in the same subnet in the shared services VPC

Answer

D. Appliance mode is not enabled on the transit gateway attachment to the application VPCs.

Q97 — AWS ANS-C01 Ch.1

Correct Answer: B. Appliance mode is not enabled on the transit gateway attachment to the shared services VPC.

Explanation