AmazonAmazon Advanced Networking Specialty ANS-C01 Certification·EN·Updated 3 Aug 2026
A government contractor must build a multi-account, multi-VPC environment where all inter-VPC traffic is transparently inspected by a third-party appliance. The customer requires AWS Transit Gateway, high availability across Availability Zones, automated failover, and no asymmetric routing through the inspection appliances. Which combination of actions is part of a solution that meets these constraints? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: Deploy two clusters that consist of multiple appliances across multiple Availability Zones in a designated inspection VPC. Connect the inspection VPC to the transit gateway by using a VPC attachment. Create a target group, and register the appliances with the target group. Create a Gateway Load Balancer, and set it up to forward to the newly created target group. Configure a default route in the inspection VPC's transit gateway subnet toward the Gateway Load Balancer endpoint., Configure two route tables on the transit gateway. Associate one route table with all the attachments of the application VPCs. Associate the other route table with the inspection VPC's attachment. Propagate all VPC attachments into the inspection route table. Define a static default route in the application route table. Enable appliance mode on the attachment that connects the inspection VPC..
Why this is the answer
The first correct option describes using a Gateway Load Balancer (GWLB) for transparent inspection. GWLB is specifically designed for deploying third-party virtual appliances, ensuring all traffic passes through them without asymmetric routing. It provides high availability and automated failover by distributing traffic across appliances in a target group. A