A media streaming company wants to implement network-level monitoring and real-time security alerts for its virtual private cloud (VPC) environment. The company has two requirements:
1. Capture detailed information about the IP traffic going to and from network interfaces in the VPC to audit security group rule effectiveness.
2. Create automated alarms that notify the security operations team if there is a sudden spike in unauthorized connection attempts (such as HTTP 403 errors or failed SSH attempts).
Which combination of AWS features or services should the company configure to meet these requirements? (Select TWO.)
- VPC Flow LogsCevap
- Amazon CloudWatchCevap
- CAWS CloudTrail
- DAmazon Inspector
- EAWS Shield
Cevap
VPC Flow Logs and Amazon CloudWatch
VPC Flow Logs is designed to capture IP traffic information going to and from network interfaces in a VPC, which allows the company to audit security group rules. Amazon CloudWatch is used to collect metrics, monitor logs, and trigger automated alarms when specific thresholds (such as unauthorized connection spikes) are exceeded.
Adım Adım Çözüm
Anahtar Kavram
Differentiating between network traffic logging (VPC Flow Logs) and resource monitoring/alerting (Amazon CloudWatch) versus API auditing (AWS CloudTrail) and vulnerability scanning (Amazon Inspector).