Task 1.4: Define Logging and Monitoring Requirements Across AWS and Hybrid Networks ANS-C01 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which network metric represents the amount of data transmitted over a network in a given time period?

   • AJitter
   • BThroughput
   • CPacket loss
   • DLatency
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is experiencing high latency on its AWS Site-to-Site VPN connection. The network team wants to monitor the VPN tunnel's data transfer rate and error rates to determine if the issue is on the AWS side or the on-premises side. What should they do?

   • AEnable VPC Flow Logs for the subnets that route traffic through the VPN and analyze the logs for latency.
   • BUse AWS CloudWatch Synthetics to run a ping test from an EC2 instance to the on-premises gateway.
   • CMonitor the CloudWatch metrics for the VPN tunnel, such as TunnelDataIn and TunnelDataOut, and create alarms on these metrics.
   • DCheck the VPN tunnel's status using the AWS Management Console and look for any error messages.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company must comply with a regulation that requires network logs to be stored in a specific geographic region. They have a global AWS footprint with VPCs in multiple regions. They also need to ensure that the logs are not modified after they are written. What is the best way to meet these requirements?

   • AUse AWS Organizations to create a new account in the required region and deliver all logs to that account's S3 bucket.
   • BDeliver all VPC Flow Logs and CloudTrail logs to an S3 bucket in the required region and enable S3 Object Lock in compliance mode.
   • CDeliver all logs to a CloudWatch Logs group in the required region and enable log group encryption with a KMS key.
   • DEnable VPC Flow Logs to deliver to an S3 bucket in each region and then replicate the logs to the required region using S3 Cross-Region Replication.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A financial services company must demonstrate to auditors that all network configuration changes are recorded and that the logs are immutable. They use AWS Organizations with multiple accounts. What is the most appropriate logging strategy?

   • AEnable VPC Flow Logs in each account and deliver them to a centralized CloudWatch Logs group.
   • BEnable AWS CloudTrail in each account and deliver the logs to a centralized S3 bucket in a dedicated logging account with S3 Object Lock enabled.
   • CEnable CloudTrail in the management account only and rely on it to capture all activity across the organization.
   • DUse AWS Config to record configuration changes and deliver the configuration history to an S3 bucket in the management account.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which AWS service is commonly used to deliver alarm notifications to operators via email, SMS, or HTTP endpoints?

   • AAmazon Simple Queue Service (SQS)
   • BAmazon CloudWatch Logs
   • CAWS Lambda
   • DAmazon Simple Notification Service (SNS)
   Reveal Solution Discussion Select an answer first