nerdexam
Amazon

DVA-C02 · Question #110

A developer is leveraging a Border Gateway Protocol (BGP)-based AWS VPN connection to connect from on-premises to Amazon EC2 instances in the developer's account. The developer is able to access an EC

The correct answer is C. VPC Flow Logs. VPC Flow Logs capture network traffic information going to and from network interfaces in a VPC. They are the best tool to verify if traffic is reaching subnet B and how it is being handled (accepted or rejected), helping to diagnose connectivity issues at the subnet or instance

Submitted by ahmad_uae· Mar 5, 2026Troubleshooting and Optimization

Question

A developer is leveraging a Border Gateway Protocol (BGP)-based AWS VPN connection to connect from on-premises to Amazon EC2 instances in the developer's account. The developer is able to access an EC2 instance in subnet A, but is unable to access an EC2 instance in subnet B in the same VPC. Which logs can the developer use to verify whether the traffic is reaching subnet B?

Options

  • AVPN logs
  • BBGP logs
  • CVPC Flow Logs
  • DAWS CloudTrail logs

How the community answered

(28 responses)
  • A
    18% (5)
  • B
    7% (2)
  • C
    71% (20)
  • D
    4% (1)

Explanation

VPC Flow Logs capture network traffic information going to and from network interfaces in a VPC. They are the best tool to verify if traffic is reaching subnet B and how it is being handled (accepted or rejected), helping to diagnose connectivity issues at the subnet or instance level.

Community Discussion

No community discussion yet for this question.

Full DVA-C02 Practice