AWS Certified Advanced Networking Specialty Practice Exam

Which tool can be utilized to monitor traffic by recording source and destination IP addresses of VPC and EC2 instances?

1. VPC Flow Logs

2. CloudTrail

3. Amazon CloudWatch

4. Elastic Load Balancing

The correct answer is: VPC Flow Logs

VPC Flow Logs is the appropriate tool for monitoring traffic by capturing source and destination IP addresses of VPC and EC2 instances. This feature allows you to log network traffic data flowing in and out of your network interfaces within your Virtual Private Cloud (VPC). By enabling VPC Flow Logs, you gain visibility into network traffic patterns, which can help with security analysis, network performance optimization, and troubleshooting. VPC Flow Logs captures information about the IP traffic that is reaching your instances, enabling you to analyze data such as which instances are communicating with each other, the volume of traffic, and the protocols in use. This granular data can be invaluable for network monitoring and enhances your ability to understand and control data flow within your AWS infrastructure. In contrast, CloudTrail primarily focuses on logging API calls and user activity across AWS services, which does not reflect traffic patterns at the IP level. Similarly, Amazon CloudWatch provides monitoring for AWS resources and applications through metrics, logs, and alarms, but it doesn’t specifically capture the detailed traffic data as VPC Flow Logs does. Elastic Load Balancing, while it can manage incoming traffic to your applications, does not record source and destination IP addresses in the same manner as VPC Flow Logs. Thus, VPC