An architect needs to capture information about the IP traffic going to and from network interfaces in a VPC for security analysis. Which feature should be enabled?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: VPC Flow Logs

VPC Flow Logs enable you to capture information about IP traffic in your VPC, which can be published to CloudWatch Logs or Amazon S3....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

An architect needs to capture information about the IP traffic going to and from network interfaces in a VPC for security analysis. Which feature should be enabled?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

VPC Flow Logs

Why This Answer Is Correct

VPC Flow Logs enable you to capture information about IP traffic in your VPC, which can be published to CloudWatch Logs or Amazon S3.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.