SAP-C02 · Question #388
A company has VPC flow logs enabled for its NAT gateway. The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2…
The correct answer is B. Open the Amazon CloudWatch console. Select the log group that contains the NAT gateway's. It filters the logs based on the source address "like 198.51.100.2" (the public IP address) and the destination address "like 203.0" (which corresponds to the VPC CIDR block). By analyzing the traffic between these addresses, you can determine whether the traffic represents…
Question
A company has VPC flow logs enabled for its NAT gateway. The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2 instance. A solutions architect must determine whether the traffic represents unsolicited inbound connections from the internet. The first two octets of the VPC CIDR block are 203.0. Which set of steps should the solutions architect take to meet these requirements?
Options
- AOpen the AWS CloudTrail console. Select the log group that contains the NAT gateway's elastic
- BOpen the Amazon CloudWatch console. Select the log group that contains the NAT gateway's
- COpen the AWS CloudTrail console. Select the log group that contains the NAT gateway's elastic
- DOpen the Amazon CloudWatch console. Select the log group that contains the NAT gateway's
How the community answered
(21 responses)- A14% (3)
- B71% (15)
- C5% (1)
- D10% (2)
Explanation
It filters the logs based on the source address "like 198.51.100.2" (the public IP address) and the destination address "like 203.0" (which corresponds to the VPC CIDR block). By analyzing the traffic between these addresses, you can determine whether the traffic represents unsolicited inbound connections from the internet.
Community Discussion
No community discussion yet for this question.