ANS-C01 · Question #297
A company wants to analyze TCP internet traffic. The traffic originates from Amazon EC2 instances in the company's VPC. The EC2 instances initiate connections through a NAT gateway. The company wants
The correct answer is A. Configure the EC2 instances to be VPC traffic mirror sources. Deploy software on the traffic mirror. This solution meets the requirements for capturing detailed TCP internet traffic, including source and destination IP addresses, ports, and the first 8 bytes of TCP segments. By configuring the EC2 instances as traffic mirror sources and deploying a software solution on the targe
Question
A company wants to analyze TCP internet traffic. The traffic originates from Amazon EC2 instances in the company's VPC. The EC2 instances initiate connections through a NAT gateway. The company wants to capture data about the traffic including source and destination IP addresses ports, and the first 8 bytes of the TCP segments of the traffic. The company needs to collect, store, and analyze all the required data points. Which solution will meet these requirements?
Options
- AConfigure the EC2 instances to be VPC traffic mirror sources. Deploy software on the traffic mirror
- BConfigure the NAT gateway to be a VPC traffic mirror source. Deploy software on the traffic mirror
- CTurn on VPC Flow Logs for the EC2 instances. Specify the default format and set Amazon
- DTurn on VPC Flow Logs for the EC2 instances. Specify a custom format and set Amazon S3 as
How the community answered
(38 responses)- A76% (29)
- B8% (3)
- C3% (1)
- D13% (5)
Explanation
This solution meets the requirements for capturing detailed TCP internet traffic, including source and destination IP addresses, ports, and the first 8 bytes of TCP segments. By configuring the EC2 instances as traffic mirror sources and deploying a software solution on the target to forward the captured traffic to CloudWatch Logs, you can analyze the traffic in-depth using CloudWatch Logs Insights. VPC traffic mirroring is ideal for capturing low-level network traffic, providing the necessary data points for analysis.
Community Discussion
No community discussion yet for this question.