AWS Certified Advanced Networking - Specialty
Get started today
Ultimate access to all questions.
A company needs to collect, store, and analyze TCP traffic originating from Amazon EC2 instances in its VPC, where the instances initiate connections via a NAT gateway. The data to be captured includes source and destination IP addresses, ports, and the first 8 bytes of payload from TCP segments. Which solution fulfills these requirements?
A company needs to collect, store, and analyze TCP traffic originating from Amazon EC2 instances in its VPC, where the instances initiate connections via a NAT gateway. The data to be captured includes source and destination IP addresses, ports, and the first 8 bytes of payload from TCP segments. Which solution fulfills these requirements?
Exam-Like
A
Set up the EC2 instances as VPC traffic mirror sources. Deploy software on the traffic mirror target to forward the data to Amazon CloudWatch Logs. Analyze the data by using CloudWatch Logs Insights.
20.0%
B
Set up the NAT gateway as a VPC traffic mirror source. Deploy software on the traffic mirror target to forward the data to an Amazon OpenSearch Service cluster. Analyze the data by using OpenSearch Dashboards.
Comments
Loading comments...