A Company Is Running an Application Distributed Over Several Amazon

question 778

Multiple Choice

A company is running an application distributed over several Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The security team requires that all application access attempts be made available for analysis. Information about the client IP address, connection type, and user agent must be included. Which solution will meet these requirements?

• A) Enable EC2 detailed monitoring, and include network logs. Send all logs through Amazon Kinesis Data Firehose to an Amazon Elasticsearch Service (Amazon ES) cluster that the security team uses for analysis.
• B) Enable VPC Flow Logs for all EC2 instance network interfaces. Publish VPC Flow Logs to an Amazon S3 bucket. Have the security team use Amazon Athena to query and analyze the logs.
• C) Enable access logs for the Application Load Balancer, and publish the logs to an Amazon S3 bucket. Have the security team use Amazon Athena to query and analyze the logs.
• D) Enable Traffic Mirroring and specify all EC2 instance network interfaces as the source. Send all traffic information through Amazon Kinesis Data Firehose to an Amazon Elasticsearch Service (Amazon ES) cluster that the security team uses for analysis.

---

Definitions:

Small Business

A privately owned corporation, partnership, or sole proprietorship that has fewer employees and less annual revenue than a corporation or regular-sized business.

Business Strategies

Plans of action designed to achieve specific goals and objectives in the commercial world, often involving the coordination of resources.

Holistic Cognitive Style

An approach to processing information that emphasizes an overall or global perspective, often considering context and relationships between parts.

Cross-Cultural Variations

Differences in behaviors, traditions, norms, and practices observed among people from different cultures or societies.