AWS Certified Advanced Networking Specialty Practice Exam

What factors do Amazon VPC Flow Logs report based on?

1. Security groups

2. Network Access Control Lists (ACLs)

3. Route tables

4. Direct Connect gateways

The correct answer is: Security groups

Amazon VPC Flow Logs provide detailed information about the IP traffic going to and from network interfaces in your Virtual Private Cloud (VPC). The primary focus of Flow Logs is on the data concerning the traffic associated with network interfaces, which includes how security groups are used to control that traffic. When you enable Flow Logs, you can log information such as accepted or rejected traffic based on the security group configurations. This helps in traffic monitoring and troubleshooting security groups to ascertain whether they are functioning as intended. The information provided by Flow Logs can reveal valuable insights about the usage patterns of security groups, making them an essential tool for network visibility and security analysis within your VPC. The other choices, while relevant to the overall VPC architecture, do not directly relate to the specific reporting of VPC Flow Logs. Network ACLs and route tables play roles in traffic routing and control but are not the focus of the Flow Logs themselves. Similarly, Direct Connect gateways facilitate hybrid cloud environments but do not serve as the basis for the metrics provided in Flow Logs.