A company needs to capture and log traffic for Nitro-based Amazon EC2 instances to comply with regulations. The company's network team has prepared a solution that enables VPC traffic mirroring and…

Question

Options

• ASelect the NLB as a source for traffic mirroring. Use a UDP listener.
• BSelect the NLB as a target for traffic mirroring. Use a TCP listener and a UDP listener.
• CSelect the NLB as a target for traffic mirroring. Use a TCP listener.
• DSelect the NLB as a target for traffic mirroring. Use a UDP listener.

• A
  6% (1)
• B
  18% (3)
• C
  6% (1)
• D
  71% (12)

Explanation

Traffic Mirroring with UDP: VPC traffic mirroring sends mirrored traffic as UDP packets encapsulated in VXLAN (Virtual eXtensible Local Area Network). Therefore, the target for traffic mirroring must have a UDP listener to accept the mirrored traffic. NLB as a Target: The Network Load Balancer (NLB) can be configured as the target for traffic mirroring. By setting up a UDP listener on the NLB, it can properly receive the VXLAN- encapsulated mirrored traffic and forward it to the EC2 instances behind it. Correct Listener Protocol: Since mirrored traffic uses UDP, setting up a TCP listener or using both TCP and UDP listeners will not work. Only a UDP listener can correctly handle the traffic.

No community discussion yet for this question.