ANS-C01 Network Management and Operations Practice Question
A network engineer must design a solution to monitor and troubleshoot connectivity from an on-premises data center to a VPC over an AWS Direct Connect connection. The solution must provide visibility into BGP routing, packet loss, and latency. Which TWO services or features should the engineer use? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon CloudWatch Logs for Direct Connect
Amazon CloudWatch metrics for Direct Connect can monitor BGP session state, packet loss, and latency. AWS CloudTrail logs API calls but not network performance. VPC Flow Logs capture IP traffic metadata but not BGP details or latency. AWS X-Ray is for application tracing. Amazon Inspector is for security assessments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Amazon CloudWatch Logs for Direct Connect
Why this is correct
Can ingest Direct Connect logs for monitoring.
- ✗
AWS CloudTrail
Why it's wrong here
Logs API calls, not network metrics.
- ✓
Amazon CloudWatch metrics for Direct Connect
Why this is correct
Provides BGP session state, packet loss, and latency metrics.
- ✗
VPC Flow Logs
Why it's wrong here
Captures IP traffic metadata, not BGP or latency.
- ✗
AWS X-Ray
Why it's wrong here
Traces application requests, not network-level metrics.
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on ANS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO are valid methods to monitor and troubleshoot AWS Direct Connect connections?
easy- A.Use CloudFront to monitor Direct Connect utilization.
- B.Enable AWS CloudTrail to log Direct Connect API calls.
- ✓ C.Enable Direct Connect Connection and Virtual Interface metrics in CloudWatch.
- ✓ D.Use AWS Direct Connect Connection tests to verify connectivity and performance.
- E.Enable VPC Flow Logs on the VIF.
Why C: Options C and D are correct. Option C: Direct Connect connection and virtual interface metrics can be monitored through CloudWatch, providing utilization and error stats. Option D: Direct Connect Connection tests (e.g., using the AWS Management Console or CLI) allow you to verify connectivity and performance. Options A and B are incorrect: CloudFront is a CDN and not used for Direct Connect monitoring; CloudTrail logs API calls but does not provide real-time connection monitoring. Option E is incorrect: VPC Flow Logs capture IP traffic for VPCs, not Direct Connect link-level data.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.