A company wants to analyze TCP traffic to the internet. The traffic originates from Amazon EC2 instances in the company's VPC. The EC2 instances initiate connections through a NAT gateway. The…

Question

Options

• ASet up the EC2 instances as VPC traffic mirror sources. Deploy software on the traffic mirror
• BSet up the NAT gateway as a VPC traffic mirror source. Deploy software on the traffic mirror
• CTurn on VPC Flow Logs on the EC2 instances. Specify the default format and a log destination of
• DTurn on VPC Flow Logs on the EC2 instances. Specify a custom format and a log destination of

• A
  56% (18)
• B
  13% (4)
• C
  6% (2)
• D
  25% (8)

Explanation

VPC Flow Logs capture metadata about the network traffic, such as source and destination IP addresses, source and destination ports, protocol, packet and byte counts, start and end times of the flow, and more. This information is useful for monitoring and troubleshooting network traffic patterns, but it does not include the payload content of TCP segments. If you need to capture and analyze the payload data of TCP segments, you would need to use other monitoring and logging solutions, such as tapping into the network traffic with tools like Traffic Mirroring or using other packet capture mechanisms. These solutions can capture the actual data content for analysis, but they might require more advanced setup and configuration compared to VPC Flow Logs.

No community discussion yet for this question.