AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 90

Question

A company has VPC flow logs enabled for Its NAT gateway. The company is seeing Action = ACCEPT for inbound traffic that comes from public IP address 198.51.100.2 destined for a private Amazon EC2 instance. A solutions architect must determine whether the traffic represents unsolicited inbound connections from the internet. The first two octets of the VPC CIDR block are 203.0. Which set of steps should the solutions architect take to meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Open the Amazon CloudWatch console. Select the log group that contains the NAT gateway's elastic network interface and the private instance's elastic network interface. Run a query to filter with the destination addre... A NAT gateway lets private subnet resources reach the internet for outbound traffic only. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 90