An organization wants to analyze the network traffic across all their VPCs to identify unusual patterns or security threats. They need to see details like source/destination IP, ports, and protocols. What should they enable?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: VPC Flow Logs

VPC Flow Logs provide the raw network telemetry data required for deep analysis of traffic patterns....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon VPC

An organization wants to analyze the network traffic across all their VPCs to identify unusual patterns or security threats. They need to see details like source/destination IP, ports, and protocols. What should they enable?

✓ Correct Answer & ExplanationAmazon VPC

Correct Answer

VPC Flow Logs

Why This Answer Is Correct

VPC Flow Logs provide the raw network telemetry data required for deep analysis of traffic patterns.

📚 What This Question Tests

This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.