SOA-C02 · Question #15
A SysOps administrator configures VPC flow logs to publish to Amazon CloudWatch Logs. The SysOps administrator reviews the logs in CloudWatch Logs and notices less traffic than expected. After the…
The correct answer is D. VPC flow logs cannot capture traffic from on-premises servers to a VPC. VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. In this case the logs cannot capture what happens on-prem.
Question
A SysOps administrator configures VPC flow logs to publish to Amazon CloudWatch Logs. The SysOps administrator reviews the logs in CloudWatch Logs and notices less traffic than expected. After the SysOps administrator compares the VPC flow logs to logs that were captured on premises, the SysOps administrator believes that the VPC flow logs are incomplete. Which of the following is a possible reason for the difference in traffic?
Options
- ACloudWatch Logs throttling has been applied.
- BThe CloudWatch IAM role does not have a trust relationship with the VPC flow logs service.
- CThe VPC flow log is still in the process of being created.
- DVPC flow logs cannot capture traffic from on-premises servers to a VPC.
How the community answered
(42 responses)- A2% (1)
- B10% (4)
- C14% (6)
- D74% (31)
Explanation
VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. In this case the logs cannot capture what happens on-prem.
Topics
Community Discussion
No community discussion yet for this question.