SAP-C02 Question 89

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  we have to check if this is unsolicited connection. the only way to check that is if there was no initial request from vpc to destination. If there was, the accept in the flow log is for return traffic. if there is none, we can safely assume it is unsolicited request. you would see all unsolicited requests as accepted on flow logs and then they will get dropped.

• Chose D1

  Answer D tells you what you already know (from the question), that outside traffic came in. What we need to know is whether there was a previous TCP handshake - initiated by an inside host (in the 203.0 block)

• 1

  Sorry, typo in my post! "B" tells you what you already know. D is correct. (Got distracted by the very strange CIDR block)