ANS-C01 Question 155

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D2

  A- no, flow logs does not capture the DNS query itself B- no, do you imagine setting up the agent in ALL workspace instances? C- no, traffic mirror just to analyze DNS queries is an overkill D- YES, native Route53 product functionality

• Chose A1

  Option B suggests using CloudWatch Logs, but it might result in higher costs compared to VPC Flow Logs, and the push method might introduce additional complexities and costs. Option C (Traffic Mirroring) is a powerful feature, but it may introduce additional costs and complexity, especially when considering the number of Workspaces in different VPCs and Regions. Option D involves Route 53 query logging, which may not capture all DNS queries for Workspaces, especially if they are using different DNS servers. Therefore, option A using VPC Flow Logs is the most cost-effective and straightforward solution for the given scenario.

• 1

  I think that it's correct answer is B according to SPOTO products.