Exam AWS Certified SysOps Administrator - Associate topic 1 question 379 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 379
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A SysOps administrator configured VPC flow logs by using the default format. The SysOps administrator specified Amazon CloudWatch Logs as the destination. This solution has worked successfully for several months. However, because of additional troubleshooting requirements, the SysOps administrator needs to include the tcp-flags field on the flow logs.

What should the SysOps administrator do to meet this requirement?

A. Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log.
B. In the CloudWatch Logs log group, modify the filter to include the tcp-flags field and the type field.
C. In CloudWatch Metrics, modify the metric configuration to include the tcp-flags field.
D. Modify the existing flow log. Include the tcp-flags field and the type field in the custom log format. Save the configuration.

Show Suggested Answer

Suggested Answer: A 🗳️

by Tapkar at Aug. 25, 2023, 8:41 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Tapkar

Highly Voted 1 year, 5 months ago

Answer is A. tcp-flags are not included into default format. If you want to have tcp-flags, you should use custom log format. You can't modify existing flow log. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html

upvoted 9 times

...

joshnort

Most Recent 10 months, 2 weeks ago

Selected Answer: A

A: Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log. "After you create a flow log, you cannot change its configuration or the flow log record format. For example, you can't associate a different IAM role with the flow log, or add or remove fields in the flow log record. Instead, you can delete the flow log and create a new one with the required configuration." https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-logs-limitations

upvoted 3 times

...

r2c3po

1 year, 1 month ago

Selected Answer: A

A. Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log. This way, you can create a new flow log with the desired log format, including the tcp-flags field, and then switch to using the new flow log configuration.

upvoted 2 times

...

Globus777

1 year, 3 months ago

Answer is A.

upvoted 2 times

...

xSohox

1 year, 5 months ago

Selected Answer: A

https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-logs-limitations

upvoted 2 times

...