A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the togs the SysOps administrator notices that rejected traffic is not listed. What…

The correct answer is A. Create a new flow log that has a titter setting to capture all traffic. After you create a flow log, you cannot change its configuration or the flow log record format. For example, you can't associate a different IAM role with the flow log, or add or remove fields in the flow log record. Instead, you can delete the flow log and create a new one…

Submitted by paula_co· Mar 30, 2026Monitoring, Logging, and Remediation

Question

A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the togs the SysOps administrator notices that rejected traffic is not listed. What should the SysOps administrator do to ensure that all traffic is logged?

Options

ACreate a new flow log that has a titter setting to capture all traffic.
BCreate a new flow log set the tog record format to a custom format.
CEdit the existing flow log.
DEdit the existing flow log.

How the community answered

(30 responses)

A
73% (22)
B
3% (1)
C
10% (3)
D
13% (4)

Explanation

After you create a flow log, you cannot change its configuration or the flow log record format. For example, you can't associate a different IAM role with the flow log, or add or remove fields in the flow log record. Instead, you can delete the flow log and create a new one with the required https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-logs-limitations

Topics

#VPC Flow Logs#traffic filtering#logging configuration#network monitoring

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice