Q64 — AWS SAA-C03 Ch.11

Question 64 of 100 | ← Chapter 11

Q764. A company's application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases that are deployed in an Amazon VPC. The company wants to capture information about traffic to and from the network interfaces in near real time in its Amazon VPC. The company wants to send the information to Amazon OpenSearch Service for analysis.Which solution will meet these requirements?

Correct Answer: B. Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service.

Explanation

To capture information about traffic to and from the network interfaces in near real time in an Amazon VPC and send it to Amazon OpenSearch Service for analysis, the most suitable solution is:B. Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service.Option B provides the desired solution:Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service:\1. Amazon CloudWatch Logs: By creating a log group in Amazon CloudWatch Logs, you can centralize and store the log data from VPC Flow Logs, which capture information about the network traffic within the VPC.\2. VPC Flow Logs: Configure VPC Flow Logs to send the log data to the created log group in CloudWatch Logs. VPC Flow Logs capture metadata about IP traffic going to and from the network interfaces in the VPC, providing visibility into network traffic patterns.\3. Amazon Kinesis Data Firehose: Set up Amazon Kinesis Data Firehose to read the log data from the CloudWatch Logs log group and stream it to Amazon OpenSearch Service. Kinesis Data Firehose simplifies the delivery of streaming data to various destinations, including OpenSearch Service for analysis.Here's why the other options are not the most suitable choices:Option A suggests creating a log group in Amazon CloudWatch Logs, configuring VPC Flow Logs to send the log data to the log group, and using Amazon Kinesis Data Streams to stream the logs from the log group to OpenSearch Service. While this approach can work, Amazon Kinesis Data Firehose is a more suitable service for streaming data to OpenSearch Service, as it simplifies the delivery process.Option C suggests creating a trail in AWS CloudTrail, configuring VPC Flow Logs to send the log data to the trail, and using Amazon Kinesis Data Streams to stream the logs from the trail to OpenSearch Service. However, AWS CloudTrail is primarily used for auditing API calls and management events, not for capturing VPC Flow Logs data.Option D suggests creating a trail in AWS CloudTrail, configuring VPC Flow Logs to send the log data to the trail, and using Amazon Kinesis Data Firehose to stream the logs from the trail to OpenSearch Service. While AWS CloudTrail can capture API and management events, it is not the appropriate service for capturing and analyzing VPC Flow Logs data.Therefore, the most appropriate solution to capture information about traffic in an Amazon VPC and send it to Amazon OpenSearch Service for analysis is B: Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service.