ANS-C01 Question 381
Select 3An organization is troubleshooting intermittent connectivity issues between their application servers hosted in a private subnet and an external third-party API endpoint. They want to analyze network traffic patterns to determine the cause of the issue. Which combination of AWS tools can be used to collect and analyze network traffic data effectively?
- A
Amazon VPC Flow Logs
- B
VPC Traffic Mirroring
- C
AWS X-Ray
- D
CloudWatch Logs Insights
- E
AWS Shield Advanced
Show answer and explanation
Correct answers: A, B, D
Explanation
To troubleshoot intermittent connectivity issues, you need tools that can provide both metadata and detailed network traffic information. VPC Flow Logs captures metadata about traffic within a VPC, while VPC Traffic Mirroring allows for deeper analysis of packet-level data. CloudWatch Logs Insights can be used to query and analyze the logs generated by VPC Flow Logs, enabling insights into traffic patterns and potential issues. AWS X-Ray and AWS Shield Advanced are not relevant for this specific scenario.
- A. Correct.
Amazon VPC Flow Logs can capture IP traffic metadata for network interfaces in a VPC, helping to identify patterns, errors, or anomalies in network connectivity.
- B. Correct.
VPC Traffic Mirroring provides packet-level analysis by mirroring the actual network traffic from an elastic network interface, which is helpful for diagnosing complex performance or connectivity issues.
- C. Incorrect.
AWS X-Ray is primarily used for tracing application-level requests and debugging application performance issues, not for analyzing network traffic patterns.
- D. Correct.
CloudWatch Logs Insights allows querying and analyzing log data, such as VPC Flow Logs, to derive meaningful insights and troubleshoot network issues.
- E. Incorrect.
AWS Shield Advanced is a service for protecting against DDoS attacks and does not provide tools for analyzing network traffic patterns.