ANS-C01 Network Management and Operations Practice Question
A network engineer is troubleshooting a VPN connectivity issue. The VPN tunnel is up, but traffic is not passing. Which TWO AWS services should the engineer use to diagnose the problem?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC Flow Logs
The correct answers are B and E. VPC Flow Logs capture IP traffic information for network interfaces, which can show if traffic is reaching the VPN endpoint. Amazon CloudWatch provides VPN tunnel metrics (e.g., tunnel state, data in/out) and logs, helping to diagnose connectivity issues. Option A (AWS Config) is incorrect because it tracks resource configuration changes, not network traffic. Option C (AWS CloudTrail) is incorrect because it logs API calls, not data plane traffic. Option D (AWS Direct Connect) is incorrect because it is a dedicated connection service, not a diagnostic tool for VPN.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Config
Why it's wrong here
Config tracks configuration, not traffic.
- ✓
VPC Flow Logs
Why this is correct
Flow Logs can show traffic flow to the VPN endpoint.
- ✗
AWS CloudTrail
Why it's wrong here
CloudTrail logs API calls, not traffic.
- ✗
AWS Direct Connect
Why it's wrong here
Direct Connect is not related to VPN.
- ✓
Amazon CloudWatch
Why this is correct
CloudWatch provides VPN tunnel metrics and logs.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.