Task 3.2: Monitor and Analyze Network Traffic to Troubleshoot and Optimize Connectivity Patterns ANS-C01 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A network engineer needs to understand the primary purpose of monitoring network traffic in an AWS environment. Which statement best describes this purpose?

   • ATo collect and analyze traffic data to identify issues, detect anomalies, and inform decisions for optimizing connectivity.
   • BTo automatically reroute traffic to alternate paths without human intervention.
   • CTo encrypt all network traffic between VPCs and on-premises networks.
   • DTo replace the need for security groups and network ACLs by providing real-time traffic filtering.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network engineer is troubleshooting a connectivity issue between two EC2 instances in the same VPC. The instances can ping each other, but the application running on TCP port 443 fails to connect. VPC Flow Logs show 'ACCEPT' for both directions on port 443. Which tool should the engineer use to determine if the TCP handshake is completing?

   • AUse the AWS Management Console to view the flow logs for the specific connection.
   • BUse the 'ping' command to test connectivity on port 443.
   • CUse 'tcpdump' on both instances to capture the packets and analyze the TCP handshake.
   • DUse the 'telnet' command from the client instance to test connectivity to port 443.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company runs a critical application on EC2 instances in an Auto Scaling group. The application is sensitive to network latency. The team wants to be alerted when the average network latency to the application exceeds 100 milliseconds for 10 minutes. Which solution should they use?

   • AUse VPC Flow Logs to calculate latency and create a CloudWatch alarm on the calculated metric.
   • BCreate a CloudWatch alarm on the 'NetworkLatency' metric in the 'AWS/EC2' namespace.
   • CUse CloudWatch Synthetics to create a canary that measures latency from a public endpoint and create an alarm on the canary's 'Duration' metric.
   • DEnable Traffic Mirroring on the instances and use a third-party tool to measure latency and trigger an alarm.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a common technique to optimize connectivity patterns based on monitoring insights?

   • ADisabling VPC Flow Logs to reduce overhead
   • BPlacing resources in the same Availability Zone to reduce latency
   • CAdjusting security group rules to allow more traffic
   • DIncreasing the size of the VPC CIDR block
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A network engineer notices high latency between an application and its users. Which monitoring data would be most useful to identify the source of the latency?

   • AAWS CloudTrail logs of API calls
   • BCloudWatch metrics for network latency and packet loss
   • CVPC Flow Logs showing accepted and rejected traffic
   • DAWS Config rules for security group changes
   Reveal Solution Discussion Select an answer first