Your company currently has a set of EC2 Instances hosted in a VPC. The IT Security department is suspecting a possible DDos attack on the instances. What can you do to zero in on the IP addresses…

Question

Options

• AUse VPC Flow logs to get the IP addresses accessing the EC2 Instances
• BUse AWS Cloud trail to get the IP addresses accessing the EC2 Instances
• CUse AWS Config to get the IP addresses accessing the EC2 Instances
• DUse AWS Trusted Advisor to get the IP addresses accessing the EC2 Instances

• A
  77% (24)
• B
  3% (1)
• C
  13% (4)
• D
  6% (2)

Explanation

With VPC Flow logs you can get the list of IP addresses which are hitting the Instances in your VPC You can then use the information in the logs to see which external IP addresses are sending a flurry of requests which could be the potential threat foi a DDos attack. Option B is incorrect Cloud Trail records AWS API calls for your account. VPC FLowlogs logs network traffic for VPC, subnets. Network interfaces etc. VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC where as AWS CloudTrail, is a service that captures API calls and delivers the log files to an Amazon S3 bucket that you specify. Option C is invalid this is a config service and will not be able to get the IP addresses Option D is invalid because this is a recommendation service and will not be able to get the IP https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html

No community discussion yet for this question.