Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Advanced Networking - Specialty · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Option C is actually the most cost-effective solution. By configuring VPC flow logs with additional custom format fields, the logs will be stored in Amazon S3, which has a lower storage cost compared to Amazon CloudWatch Logs. This option also allows for more flexibility and control over the log data, as well as the ability to easily access and filter the logs using AWS CLI or SDKs.
S3 is more cost effective!
The other options are less cost-effective: Option A does not allow you to capture the custom fields you need (vpc-id, subnet-id, and tcp-flags). Option B, Traffic Mirroring, would involve a considerable overhead in terms of infrastructure and cost. Traffic Mirroring copies all traffic (not just metadata), which can be massive, and it requires additional resources to capture and process that traffic. Option D is less cost-effective for long-term, infrequently accessed storage because Amazon CloudWatch Logs is more expensive than Amazon S3 for these use cases.