ANS-C01 · Question #247
A financial company offers investment forecasts and recommendations to authorized users through the internet. All the services are hosted in the AWS Cloud. A new compliance requirement states that all
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #247. The question stem and answer options stay visible for context.
Question
A financial company offers investment forecasts and recommendations to authorized users through the internet. All the services are hosted in the AWS Cloud. A new compliance requirement states that all the internet service traffic from any host must be logged and retained for 2 years. In its development AWS accounts, the company has designed, tested, and verified a solution that uses Amazon VPC Traffic Mirroring with a Network Load Balancer (NLB) as the traffic mirror target. While the solution runs in one AWS account, the solution mirrors the traffic to another AWS account. A network engineer notices that not all traffic is mirrored when the solution is deployed into the production environment. The network engineer also notices that this behavior is random. Which statements are possible explanations for why not all the traffic is mirrored? (Choose two.)
Options
- AThe security groups are misconfigured on the production AWS account that hosts the company's
- BThe Amazon EC2 instance that is being monitored cannot handle the extra traffic that Traffic
- CThe IAM policy that allows the creation of traffic mirror sessions is misconfigured
- DThe mirrored traffic has a lower priority than the production traffic and is being dropped when
- EThe NLB is experiencing warm-up delay because of sudden and significant increases in traffic.
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.