ANS-C01 Network Security, Compliance and Governance Practice Question
Network Topology
Refer to the exhibit. A network engineer has configured VPC Flow Logs for a VPC and is verifying the logs. The flow logs are being delivered to CloudWatch Logs, but the engineer notices that the logs do not contain the 'srcaddr' and 'dstaddr' fields. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The flow log is using the default log format, which does not include source and destination addresses
The default log format for VPC Flow Logs does not include source and destination addresses. To include those fields, you must specify a custom format with `${srcaddr}` and `${dstaddr}`. Since the logs are missing these fields, the flow log is likely using the default format rather than a custom one.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The flow log is configured with TrafficType set to 'REJECT' only
Why it's wrong here
TrafficType is ALL, which includes accepted and rejected traffic.
- ✗
The IAM role FlowLogRole does not have permission to write to CloudWatch Logs
Why it's wrong here
The flow log status is ACTIVE, so permissions are correct.
- ✗
The flow log is configured with a MaxAggregationInterval of 60 seconds, which causes fields to be omitted
Why it's wrong here
The aggregation interval does not affect which fields are logged.
- ✓
The flow log is using the default log format, which does not include source and destination addresses
Why this is correct
The default format does not include srcaddr and dstaddr; a custom format is required.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.