A company requires that the source, destination, and protocol of all IP packets be recorded when traversing a private subnet.What is the MOST secure and reliable method of accomplishing this goal.

Question

Accepted Answer

Create VPC flow logs on the subnet.

Answer

Enable source destination check on private Amazon EC2 instances.

Answer

Enable AWS CloudTrail logging and specify an Amazon S3 bucket for storing log files.

Answer

Create an Amazon CloudWatch log to capture packet information.

Home / Amazon / SAA-C01 / Question 42

Question 42

A company requires that the source, destination, and protocol of all IP packets be recorded when traversing a private subnet.What is the MOST secure and reliable method of accomplishing this goal.

Answers

A. Create VPC flow logs on the subnet.

B. Enable source destination check on private Amazon EC2 instances.

C. Enable AWS CloudTrail logging and specify an Amazon S3 bucket for storing log files.

D. Create an Amazon CloudWatch log to capture packet information.

Comments