Exam AWS Certified Security - Specialty topic 1 question 183 discussion

C is correct here. Logging server receives the traffic but doesnt know how to send it back. Its a routing issue.

C. A doesn't make sense as the VPC flow logs tell us that the request is accepted initially.

I'd go with C in this one. Routing back to webserver VPC.

C is the Answer

Option C.

We are not on Azure. on AWS, peering two VPCs will not automatically create the routing tables between the two VPcs. You need to return the in outbount traffic to the source VPC

A - Wrong, as the log server accepts request B - Wrong, as the log server accepts request C - the only choice D - Wrong, as the log server accepts request

Answer C "The VPC flow logs indicate that although the logging server accepts requests received by the web server, the web server never gets a response." --> This is the difference between C & D. No Problem at Route Table at web server VPC

SG are stateful

It is C, Quote: "To enable the routing of traffic between VPCs in a VPC peering connection, you must add a route to one or more of your subnet route tables that points to the VPC peering connection. This allows you to access all or part of the CIDR block of the other VPC in the peering connection. Similarly, the owner of the other VPC must add a route to their subnet route table to route traffic back to your VPC" Link: https://docs.aws.amazon.com/vpc/latest/userguide/route-table-options.html#route-tables-vpc-peering

Yeah I'm pretty sure I've troubleshooted this on my job when a peering connection wasn't working. I too believe its C

C is the answer because the return path is broken and that needs a fix.

i go with D: Logging server needs to know the return route of the web server network

C. is the obvious answer

I'll go with C

D is correct, "Logging server receives the traffic but doesnt know how to send it back. Its a routing issue". As stated, Logging server receives traffic and thus logging server is already on the route table. What is missing, is the route back to the webserver and it needs to be added towards peering connection.

C. Right