ANS-C01 Domain 3: Network Management and Operation

What is the MOST appropriate AWS solution to analyze VPC traffic metadata?

Multiple choice — select one answer

Answer choices

  1. a. VPC Flow Logs to S3 or CloudWatch
  2. b. AWS Network Manager topology
  3. c. Traffic mirroring to security appliance
  4. d. GuardDuty with DNS/VPC findings

Architectural breakdown & explanation

Flow Logs capture ACCEPT/REJECT metadata.

Correct answer(s): a. VPC Flow Logs to S3 or CloudWatch

Exam domain: Domain 3: Network Management and Operation (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Advanced Networking – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.