You have multiple Amazon Elastic Compute Cloud (EC2) instances running a web server in a VPC configured with security groups and NACL. You need to ensure layer 7 protocol level logging of all…

Question

Options

• ACloudWatch Logs at the VPC level
• BPacket sniffing at the instance level
• CVPC flow logs at the subnet level
• DPacket sniffing at the VPC level

• A
  9% (3)
• B
  13% (4)
• C
  75% (24)
• D
  3% (1)

Explanation

https://aws.amazon.com/blogs/aws/vpc-flow-logs-log-and-view-network-traffic-flows/ New VPC Flow Logs In order to provide better support for this important aspect of network monitoring, we are introducing Flow Logs for the Amazon Virtual Private Cloud. Once enabled for a particular VPC, VPC subnet, or Elastic Network Interface (ENI), relevant network traffic will be logged to CloudWatch Logs for storage and analysis by your own applications or third-party tools. You can create alarms that will fire if certain types of traffic are detected; you can also create metrics to help you to identify trends and patterns. The information captured includes information about allowed and denied traffic (based on security group and network ACL rules). It also includes source and destination IP addresses, ports, the IANA protocol number, packet and byte counts, a time interval during which the flow was observed, and an action (ACCEPT or REJECT).

No community discussion yet for this question.