Question 770
An enterprise architecture team faces this design requirement: An organization needs central inspection of east-west traffic from multiple spoke VPCs without asymmetric return flows. Which architecture decision best meets that precise requirement?
Explanation
Correct Answer
Stateful network inspection requires symmetric paths through the selected inspection appliance. The required architecture outcome is: An organization needs central inspection of east-west traffic from multiple spoke VPCs without asymmetric return flows. Validate this choice by checking that Bidirectional flows traverse the inspection appliances consistently and approved inspection policies appear in logs.
Incorrect Answers
A single Direct Connect circuit creates a site-to-cloud connectivity single point of failure. The specific problem here is that the inspection design allows forward and return packets to use different stateful inspection appliances.
The architecture assumes that Transit Gateway peering automatically propagates interregional routes. The specific problem here is that the inspection design allows forward and return packets to use different stateful inspection appliances.
Each business unit manually maintains duplicative IAM users in workload accounts. The specific problem here is that the inspection design allows forward and return packets to use different stateful inspection appliances.