Examkin

Soru

Zorluk: KolayNetwork and Infrastructure Security

A security team needs to monitor and audit IP traffic routing through network interfaces in a Virtual Private Cloud (VPC) to investigate network connectivity issues. Which AWS feature should the team enable to collect this network traffic information?

  1. VPC Flow LogsCevap
  2. B
    AWS CloudTrail
  3. C
    Amazon GuardDuty
  4. D
    Security Groups

Cevap

VPC Flow Logs
VPC Flow Logs is the feature that allows you to capture and log IP traffic details for network interfaces in a VPC. It is widely used to troubleshoot connection issues and audit traffic rules.

Adım Adım Çözüm

1
Determine the security requirement, which is to capture and audit IP traffic going to and from network interfaces in a VPC.
The target resource must be a network monitoring or auditing feature.
This helps rule out services focused on API auditing or threat detection.
2
Evaluate the features of VPC Flow Logs against the other options.
VPC Flow Logs is specifically designed to log IP traffic at the network interface level, satisfying the requirements.
VPC Flow Logs provides the exact raw network traffic information needed for troubleshooting connectivity issues.

Anahtar Kavram

VPC Flow Logs enables you to capture information about the IP traffic going to and from network interfaces in your VPC.
Tahmini Süre:40s
Bu soruyu puanla

Konular

Network and Infrastructure Security

Bu konudan daha fazla soru