Task 1.4: Define Logging and Monitoring Requirements Across AWS and Hybrid Networks ANS-C01 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is experiencing intermittent performance issues with an application that communicates between two VPCs over a VPC peering connection. The network team needs to monitor the network path to identify whether the issue is due to latency, packet loss, or throughput. Which set of tools should they use?

   • AUse AWS X-Ray to trace requests across the VPC peering connection and analyze the service map for network bottlenecks.
   • BEnable VPC Flow Logs and use CloudWatch metrics for the peering connection to track bytes and packet counts.
   • CDeploy AWS CloudWatch Synthetics canaries to run HTTP requests between the VPCs and monitor latency and error rates.
   • DInstall the CloudWatch agent on EC2 instances in both VPCs and configure the network plugin to publish custom metrics for latency, packet loss, and throughput.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which AWS service can be used to stream log data in real time to multiple destinations for analysis and archival?

   • AAWS CloudTrail
   • BAmazon Kinesis Data Streams
   • CAmazon Route 53
   • DAmazon S3
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a Direct Connect connection that is critical for its hybrid network. The network team wants to be notified when the connection's status changes from 'available' to 'down' and also when the BGP session goes down. What is the most efficient way to achieve this?

   • ACreate a CloudWatch alarm on the AWS/DX ConnectionState metric and another on the AWS/DX BGPStatus metric, both with an SNS notification.
   • BSet up a scheduled Lambda function to call the DescribeDirectConnectGateways API and check the connection state, then send an SNS notification if it is down.
   • CEnable VPC Flow Logs and create a metric filter for 'reject' records to detect when traffic fails due to the Direct Connect being down.
   • DUse AWS Health events to monitor the Direct Connect connection and configure an Amazon EventBridge rule to send notifications.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company uses AWS Transit Gateway to connect multiple VPCs and on-premises networks. The network team wants to monitor DNS queries from all VPCs to identify potential data exfiltration attempts. They also want to alert when a specific domain is queried. What should they do?

   • AEnable Route 53 Resolver Query Logs and publish them to CloudWatch Logs, then create a metric filter and alarm for the specific domain.
   • BDeploy a third-party DNS logging agent on each EC2 instance to capture queries and send them to a central S3 bucket.
   • CUse AWS CloudTrail to log all Route 53 API calls and create a CloudWatch alarm on the domain name.
   • DEnable VPC Flow Logs and analyze the traffic to the DNS server IPs to infer DNS queries.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is using a Transit Gateway to interconnect multiple VPCs and on-premises networks. They are experiencing high latency on traffic between two VPCs. The network team wants to identify which network path is causing the latency. What is the most effective way to monitor this?

   • AEnable VPC Flow Logs on the Transit Gateway attachments and analyze the logs for latency.
   • BUse AWS X-Ray to trace requests between the VPCs and analyze the service map for latency.
   • CUse AWS CloudWatch Synthetics to run a canary that measures latency between the two VPCs.
   • DDeploy the CloudWatch agent on EC2 instances in both VPCs and use the network plugin to measure latency and packet loss.
   Reveal Solution Discussion Select an answer first