SAP-C02 Question 37
Select 2A company is running a multi-tier web application on AWS, and they need to monitor traffic to and from their resources for troubleshooting, compliance, and traffic analysis. They want to implement a solution that does not require installing additional software on their instances and minimizes performance overhead. Which of the following solutions should the company implement?
- A
Use Amazon VPC Flow Logs to capture traffic metadata at the network interface level.
- B
Enable AWS CloudTrail logs to monitor all IP traffic for their VPC.
- C
Deploy third-party network monitoring tools on all EC2 instances.
- D
Use Traffic Mirroring to capture and analyze packet-level traffic.
- E
Enable AWS Config to track changes in network configurations.
Show answer and explanation
Correct answers: A, D
Explanation
To monitor network traffic effectively while meeting the requirements of minimal performance overhead and no additional software installation, the company should use Amazon VPC Flow Logs for traffic metadata and Traffic Mirroring for packet-level analysis. These solutions are native to AWS and address the company’s need for troubleshooting, compliance, and traffic analysis.
- A. Correct.
Amazon VPC Flow Logs is a native AWS service that captures metadata about network traffic at the network interface level, making it suitable for monitoring traffic with minimal performance overhead.
- B. Incorrect.
AWS CloudTrail logs are designed to track API activity and changes to AWS resources, not to monitor IP traffic or network data directly.
- C. Incorrect.
Deploying third-party network monitoring tools requires installing additional software on instances, which does not meet the company's requirement of minimizing performance overhead and complexity.
- D. Correct.
Traffic Mirroring allows you to capture and analyze real-time packet-level traffic, which is a powerful solution for deep analysis without requiring additional software installation.
- E. Incorrect.
AWS Config is used for tracking configuration changes across AWS resources, but it is not designed for monitoring network traffic.