ANS-C01 Question 148

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A2

  Even with a custom format, VPC Flow Logs capture only traffic metadata (e.g., IP addresses and ports) and not payloads. This does not meet the payload inspection requirement. https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-targets.html

• 1

  D is correct

• Chose D2

  VPC Flow Logs includes information about allowed and denied traffic (based on security group and network ACL rules). It also includes source and destination IP addresses, ports, the IANA protocol number, packet and byte counts, a time interval during which the flow was observed, and an action (ACCEPT or REJECT). Reference link: https://aws.amazon.com/blogs/aws/vpc-flow-logs-log-and-view-network-traffic-flows/