Monitoring Network Interfaces for EC2 Instances - Exam ANS-C01 Answer | Amazon AWS Certified Advanced Networking - Specialty

Network Interface Monitoring for EC2 Instances

Prev Question Next Question

Question

You wanted to monitor the network interfaces for certain EC2 Instances.

Which of the following would assist in this requirement Choose two answers from the options given below.

Each answer forms part of the solution.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - A and C.

The AWS documentation mentions the following.

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC.

Flow log data is stored using Amazon CloudWatch Logs.

After you've created a flow log, you can view and retrieve its data in Amazon CloudWatch Logs.

For more information on VPC flow logs please see the below link:

http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html

The options provided in the question are as follows: A. Go to the necessary network interfaces in the AWS console. B. Log into the EC2 Instances and choose the networking interfaces. C. Enable Flow Logs. D. Enable Network interface logging.

To monitor the network interfaces of certain EC2 instances, the following two options would be suitable:

Option C: Enable Flow Logs Flow Logs are a feature that allows you to capture information about the IP traffic going to and from network interfaces in your VPC. The Flow Logs data can be used to monitor traffic, troubleshoot connectivity issues, and analyze traffic patterns. Flow Logs are stored in Amazon S3 or Amazon CloudWatch Logs, which allows you to analyze the data using various tools. You can enable Flow Logs on a per-VPC, per-Subnet, or per-Network Interface basis. Enabling Flow Logs for the specific network interfaces you want to monitor will allow you to collect the data needed to analyze their traffic.

Option D: Enable Network Interface Logging Network Interface Logging is a feature that allows you to log all the network traffic that goes through the network interfaces of your EC2 instances. You can use this feature to monitor network traffic, troubleshoot connectivity issues, and detect any suspicious activity. Network Interface Logging is enabled at the network interface level and logs can be stored in Amazon S3 or Amazon CloudWatch Logs. By enabling Network Interface Logging for the specific network interfaces you want to monitor, you can capture all the traffic that goes through those interfaces and analyze it using various tools.

Therefore, options C and D would assist in monitoring the network interfaces for certain EC2 instances.