Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C: - The only option that can actually detect traffic to specific ports is: Amazon VPC Flow Logs
C sounds complex, but is the only answer that can work. Not A - Application Insights has nothing to do with SSH/RDP access to the OS; also we need a notification, not an OpsItem Not B - Just attaching a role does not create a notification Not D - Establishing SSH/RDP access is not a "state change" that would trigger this
A bit clueless here. AWS-recommended approach involves the CloudWatch Logs Agent on each EC2 instance, but that is not involved in any of the answers. A: Sounds good at first read, but "CloudWatch Application Insights" cannot detect RDP or SSH access. B: Would allow RDP or SSH access via Systems Manager, but would NOT prevent access without Systems Manager; also we'd need to configure notifications in Systems Manager which is not mentioned here.