Examkin

Question

Difficulty: EasyNetwork and Infrastructure Security

A security team needs to monitor and audit IP traffic routing through network interfaces in a Virtual Private Cloud (VPC) to investigate network connectivity issues. Which AWS feature should the team enable to collect this network traffic information?

  1. VPC Flow LogsAnswer
  2. B
    AWS CloudTrail
  3. C
    Amazon GuardDuty
  4. D
    Security Groups

Answer

VPC Flow Logs
VPC Flow Logs is the feature that allows you to capture and log IP traffic details for network interfaces in a VPC. It is widely used to troubleshoot connection issues and audit traffic rules.

Step-by-Step Solution

1
Determine the security requirement, which is to capture and audit IP traffic going to and from network interfaces in a VPC.
The target resource must be a network monitoring or auditing feature.
This helps rule out services focused on API auditing or threat detection.
2
Evaluate the features of VPC Flow Logs against the other options.
VPC Flow Logs is specifically designed to log IP traffic at the network interface level, satisfying the requirements.
VPC Flow Logs provides the exact raw network traffic information needed for troubleshooting connectivity issues.

Key Concept

VPC Flow Logs enables you to capture information about the IP traffic going to and from network interfaces in your VPC.
Estimated Time:40s
Rate this question

Topics

Network and Infrastructure Security

More questions from this topic