A city requires that traffic leaving private application subnets be inspected and limited to approved destinations and ports. Default routes that send private-tier traffic directly to an Internet Gateway are not allowed. Which design best enforces that egress control?
Select an answer to reveal the explanation.
Short Explanation
Think of the firewall path like a single guarded gate out of the city yard. Route tables force cars through that gate for inspection—no sneaky driveway straight onto the IGW highway from private tiers.
Full Explanation
Route tables are part of secure workload design: private egress should be directed through inspection points such as AWS Network Firewall or equivalent firewall endpoints rather than a direct default route to an Internet Gateway. That enables port and destination controls for outbound traffic. Attaching IGWs to private subnets or removing routing discipline defeats segmentation.