Task 5.3: Troubleshoot Network Connectivity Issues. SOA-C03 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A CloudOps engineer needs to identify whether a security group is blocking traffic to an EC2 instance. Which AWS feature provides detailed information about accepted and rejected traffic at the network interface level?

   • AAWS CloudTrail
   • BCloudFront logs
   • CVPC flow logs
   • DAWS Config
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company runs a web application on EC2 instances behind an Application Load Balancer. The operations team wants to analyze client IP addresses and request patterns. Which log sources should the team enable?

   • AELB access logs and VPC Flow Logs.
   • BAWS WAF logs and CloudTrail logs.
   • CCloudFront logs and S3 access logs.
   • DVPC Flow Logs and CloudTrail logs.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a VPC with a private subnet that needs to access an S3 bucket. The company has created a VPC endpoint for S3 and added a route to the endpoint in the route table. However, the application is still failing to access the bucket. VPC Flow Logs show that traffic from the application instance to the S3 endpoint is being accepted. What is the most likely cause?

   • AThe route table does not have a route to the S3 prefix list.
   • BThe S3 bucket policy does not allow access from the VPC endpoint.
   • CThe security group for the application instance does not allow outbound traffic to the endpoint.
   • DThe VPC endpoint is not in the same region as the S3 bucket.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A company has an AWS Site-to-Site VPN connection between its on-premises network and a VPC. The VPN tunnel status is 'UP', but instances in the VPC cannot ping on-premises servers. Which configuration should be checked first to ensure traffic can flow?

   • AVPC peering connection
   • BAWS Direct Connect virtual interface
   • CInternet gateway
   • DRoute tables in the VPC
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company uses CloudFront with an S3 origin. The company notices that some requests are being blocked by AWS WAF. The operations team needs to determine which requests are being blocked and why. Which log sources should the team analyze?

   • AVPC Flow Logs and CloudFront access logs.
   • BS3 access logs and CloudFront access logs.
   • CCloudTrail logs and AWS WAF web ACL logs.
   • DCloudFront access logs and AWS WAF web ACL logs.
   Reveal Solution Discussion Select an answer first