A cloud network engineer needs to enable network flow analysis in the VPC so headers and payload of captured data can be inspected. Which of the following should the engineer use for this task?

The correct answer is C. Traffic mirroring. Traffic mirroring (also called port mirroring or SPAN in physical environments) copies network packets - including both the headers and the full payload - and sends them to an inspection tool or sensor. This is critical for deep packet inspection. Standard VPC Flow Logs / Network

Cloud Network Implementation

Question

Options

AApplication monitoring
BSyslog service
CTraffic mirroring
DNetwork flows

How the community answered

(34 responses)

A
15% (5)
B
6% (2)
C
74% (25)
D
6% (2)

Explanation

Traffic mirroring (also called port mirroring or SPAN in physical environments) copies network packets - including both the headers and the full payload - and sends them to an inspection tool or sensor. This is critical for deep packet inspection. Standard VPC Flow Logs / Network Flows (D) capture only metadata (source/destination IP, port, protocol, byte counts) - they do not capture payload data. Application monitoring (A) focuses on app-layer metrics, not raw packet capture. Syslog (B) is a log forwarding protocol, not a packet capture mechanism. Only traffic mirroring provides the full packet content needed for header and payload inspection.

Topics

#Traffic mirroring#Deep packet inspection#VPC networking#Network analysis

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice