ANS-C01 Question 100
Select 4Your company utilizes a hybrid network architecture with AWS Direct Connect connecting your on-premises data center to your AWS cloud environment. The network team has been tasked with implementing a comprehensive logging and monitoring solution to ensure end-to-end visibility. Which of the following components or services should you include in your design to meet this requirement?
- A
Enable VPC Flow Logs to capture IP traffic data for your VPCs.
- B
Use AWS CloudTrail to log API calls across AWS services.
- C
Implement a third-party solution to monitor Direct Connect link health, as AWS does not provide such monitoring.
- D
Enable AWS CloudWatch Logs for custom log aggregation and alerting.
- E
Configure Direct Connect monitoring using CloudWatch metrics.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
A comprehensive logging and monitoring solution for a hybrid network must include visibility across both the AWS cloud and on-premises components. AWS-native tools like VPC Flow Logs, CloudTrail, and CloudWatch Logs provide robust monitoring and logging capabilities for AWS resources. Additionally, CloudWatch metrics for Direct Connect allow for real-time monitoring of link health and performance, eliminating the need for third-party tools for this purpose.
- A. Correct.
VPC Flow Logs provide detailed information about the IP traffic going to and from network interfaces in your VPC, which is critical for understanding network behavior.
- B. Correct.
AWS CloudTrail logs API calls across AWS services, providing visibility into user activities and resource changes in your AWS environment.
- C. Incorrect.
AWS provides built-in monitoring for Direct Connect link health using CloudWatch metrics, so third-party solutions are not mandatory.
- D. Correct.
AWS CloudWatch Logs allow you to aggregate logs from various sources, set up alerts, and perform custom monitoring, making it essential for a comprehensive logging solution.
- E. Correct.
Direct Connect metrics are natively available in CloudWatch, enabling you to monitor link performance and health without additional third-party tools.