A company has enabled VPC Flow Logs and is sending them to CloudWatch Logs. The security team wants to identify traffic that is being blocked by security groups. They want to create a metric filter to count the number of rejected packets. Which field should they use in the metric filter pattern?

The 'bytes' field with a value of '0'.

The 'action' field with a value of 'REJECT'.

The 'srcaddr' field with a value of '0.0.0.0'.

The 'tcp-flags' field with a value of 'RST'.

A company has a VPC with a public subnet and a private subnet. An EC2 instance in the private subnet needs to access an S3 bucket. The instance has a VPC endpoint for S3 in the route table. Users report that the instance cannot access the S3 bucket. You check VPC Flow Logs and see 'REJECT' records for traffic to the S3 endpoint's prefix list ID. Which configuration is most likely causing the issue?

The network ACL of the private subnet does not allow inbound traffic from the S3 prefix list.

The route table does not have a route to the S3 prefix list.

The security group attached to the instance does not allow outbound traffic to the S3 prefix list.

The VPC endpoint policy does not allow the instance to access the S3 bucket.

AWSCertified Advanced Networking - Specialty

Domain 3Objective 2

Task 3.2: Monitor and Analyze Network Traffic to Troubleshoot and Optimize Connectivity Patterns ANS-C01 Practice Questions (Page 1)

Part of the Content Domain 3: Network Management and Operation domain, which accounts for 20% of the ANS-C01 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~14–23 in this domain), expect 5–8 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

20%of the exam

Questions 1–5

1foundation · easy
Which of the following is a CloudWatch metric that is commonly used to monitor network performance for an EC2 instance?
Select an answer first
2application · medium
A company has enabled VPC Flow Logs and is sending them to CloudWatch Logs. The security team wants to identify traffic that is being blocked by security groups. They want to create a metric filter to count the number of rejected packets. Which field should they use in the metric filter pattern?
Select an answer first
3foundation · easy
Which AWS service or feature is commonly used to capture information about IP traffic going to and from network interfaces in a VPC?
Select an answer first
4application · medium
A company has a VPC with a public subnet and a private subnet. An EC2 instance in the private subnet needs to access an S3 bucket. The instance has a VPC endpoint for S3 in the route table. Users report that the instance cannot access the S3 bucket. You check VPC Flow Logs and see 'REJECT' records for traffic to the S3 endpoint's prefix list ID. Which configuration is most likely causing the issue?
Select an answer first
5foundation · easy
A network engineer is analyzing VPC Flow Logs to determine why an EC2 instance cannot receive traffic from the internet. Which field in the flow log record would directly indicate whether the traffic was accepted or rejected by security groups or network ACLs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ANS-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “ANS-C01” is a trademark of its owner, used for identification only.

Task 3.2: Monitor and Analyze Network Traffic to Troubleshoot and Optimize Connectivity Patterns ANS-C01 Practice Questions (Page 1)

Questions 1–5

Which of the following is a CloudWatch metric that is commonly used to monitor network performance for an EC2 instance?

A company has enabled VPC Flow Logs and is sending them to CloudWatch Logs. The security team wants to identify traffic that is being blocked by security groups. They want to create a metric filter to count the number of rejected packets. Which field should they use in the metric filter pattern?

Which AWS service or feature is commonly used to capture information about IP traffic going to and from network interfaces in a VPC?

A network engineer is analyzing VPC Flow Logs to determine why an EC2 instance cannot receive traffic from the internet. Which field in the flow log record would directly indicate whether the traffic was accepted or rejected by security groups or network ACLs?

Keep studying — Content Domain 3: Network Management and Operation