ANS-C01 Question 466
Select 4Your organization has deployed a highly distributed application across multiple AWS Regions. The application requires monitoring of network traffic for latency issues, abnormal packet drops, and overall connectivity status between VPCs and on-premises networks. Additionally, you need historical logging of API activity for auditing purposes. Which combination of AWS services would best meet these requirements?
- A
AWS CloudTrail
- B
VPC Flow Logs
- C
Amazon CloudWatch
- D
AWS Transit Gateway Network Manager
- E
VPC Traffic Mirroring
Show answer and explanation
Correct answers: A, B, C, D
Explanation
For the given scenario, AWS CloudTrail ensures historical API activity logging for auditing purposes. VPC Flow Logs provide granular traffic data for diagnosing network issues like latency and packet drops. Amazon CloudWatch offers real-time monitoring and alerting capabilities. AWS Transit Gateway Network Manager assists in managing and monitoring connectivity across regions and on-premises networks. While VPC Traffic Mirroring allows for detailed packet-level analysis, it is not as suitable for high-level network monitoring requirements in this scenario.
- A. Correct.
AWS CloudTrail provides historical API activity logs that are crucial for auditing purposes. It does not directly monitor network traffic, but it complements this setup by offering visibility into configuration changes and API calls.
- B. Correct.
VPC Flow Logs capture IP traffic data flowing to and from network interfaces in VPCs, allowing you to monitor and troubleshoot network-level issues such as packet drops and latency problems.
- C. Correct.
Amazon CloudWatch provides real-time metrics, dashboards, and alarms, which are essential for monitoring application performance, including network latency and connectivity issues.
- D. Correct.
AWS Transit Gateway Network Manager provides a global view of your network that spans across AWS Regions and on-premises locations. It helps monitor and manage connectivity between VPCs and on-premises networks.
- E. Incorrect.
VPC Traffic Mirroring allows capturing and inspecting network packets at the subnet level for in-depth analysis. However, it is typically used for advanced packet-level diagnostics rather than broad monitoring of network performance or connectivity.