ANS-C01 Question 468
Select 3Your organization has deployed several Amazon VPCs across different AWS regions, and you need to centrally monitor the network performance and troubleshoot connectivity issues between these VPCs. Which AWS services or features would you use to accomplish this task?
- A
Amazon CloudWatch
- B
AWS CloudTrail
- C
VPC Flow Logs
- D
Transit Gateway Network Manager
- E
VPC Traffic Mirroring
Show answer and explanation
Correct answers: A, C, D
Explanation
To centrally monitor and troubleshoot the network performance and connectivity between VPCs across regions, you can use Amazon CloudWatch for monitoring metrics and setting alarms, VPC Flow Logs for analyzing IP traffic patterns, and Transit Gateway Network Manager for a centralized and global view of your network. These services together provide comprehensive network monitoring capabilities for the scenario described.
- A. Correct.
Amazon CloudWatch is a monitoring and observability service that provides metrics, logs, and alarms. It can be used to monitor the performance of your VPCs and network traffic, making it a relevant service for this scenario.
- B. Incorrect.
AWS CloudTrail is primarily a service for auditing and logging API activity and changes in your AWS account. While useful for tracking configuration changes, it is not directly designed for monitoring network performance or connectivity issues.
- C. Correct.
VPC Flow Logs capture information about the IP traffic going to and from network interfaces in your VPC. This is valuable for troubleshooting network connectivity and analyzing traffic patterns between your VPCs.
- D. Correct.
Transit Gateway Network Manager provides a centralized view of your global network, including Amazon VPCs and on-premises connections. It allows you to monitor, troubleshoot, and visualize network performance across regions, making it highly suitable for the given scenario.
- E. Incorrect.
VPC Traffic Mirroring is used to capture and analyze network traffic at the packet level from specific network interfaces. While useful for deep packet inspection, it is not the best tool for centrally monitoring the overall network performance across multiple VPCs.