Exam AWS-SysOps topic 1 question 853 discussion

Exam question from Amazon's AWS-SysOps

Question #: 853
Topic #: 1

A sysops administrator is managing a VPC network consisting of public and private subnets. Instances in the private subnets access the Internet through a NAT gateway. A recent AWS bill shows that the NAT gateway charges have doubled. The administrator wants to identify which instances are creating the most network traffic.
How should this be accomplished?

A. Enable flow logs on the NAT gateway elastic network interface and use Amazon CloudWatch insights to filter data based on the source IP addresses.
B. Run an AWS Cost and Usage report and group the findings by instance ID.
C. Use the VPC traffic mirroring feature to send traffic to Amazon QuickSight.
D. Use Amazon CloudWatch metrics generated by the NAT gateway for each individual instance.

Show Suggested Answer

Suggested Answer: A 🗳️

by orebaron at Aug. 31, 2020, 11:19 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

albert_kuo

11 months, 2 weeks ago

Selected Answer: A

Option A involves enabling VPC Flow Logs on the NAT gateway elastic network interface. VPC Flow Logs capture information about the IP traffic going to and from network interfaces in your VPC. By enabling flow logs specifically on the elastic network interface associated with the NAT gateway, you can record details of the network traffic passing through it. Using Amazon CloudWatch insights, you can then analyze the flow log data and filter it based on the source IP addresses. This allows you to identify which instances in the private subnets are generating the most outbound network traffic through the NAT gateway.

upvoted 1 times

...

Cyril_the_Squirl

2 years, 8 months ago

A is Correct. Create this in your dashboard and see

upvoted 1 times

...

RicardoD

2 years, 8 months ago

A is the answer

upvoted 2 times

...

Kimle

2 years, 8 months ago

A is correct . B is misleading choice .. since cost and usage report enables you to know the cost per resource "specifically for ec2" .. however that will give the cost of ec2 instance itself , not how much Nat gateway cost and what's the instance contribution in that cost

upvoted 2 times

...

abhishek_m_86

2 years, 8 months ago

A. Enable flow logs on the NAT gateway elastic network interface and use Amazon CloudWatch insights to filter data based on the source IP addresses. Seem correct

upvoted 2 times

...