ANS-C01 Network Management and Operations Practice Question
Which TWO options are valid ways to monitor network traffic in an AWS environment? (Choose 2.)
⚠ Common exam trap
It's easy for candidates to confuse AWS CloudTrail (which logs API calls) with network traffic monitoring, but CloudTrail does not capture data-plane packets or payloads, making VPC Flow Logs and VPC Traffic Mirroring the only correct options for actual network traffic monitoring.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC Traffic Mirroring
VPC Traffic Mirroring (Option C) is a valid way to monitor network traffic because it captures and copies network packets from Elastic Network Interfaces (ENIs) in a VPC and forwards them to monitoring appliances for deep packet inspection, security analysis, or troubleshooting. This allows you to inspect traffic content, including payloads, without impacting the source or destination of the traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Config
Why it's wrong here
Tracks configuration changes.
- ✗
AWS CloudTrail
Why it's wrong here
Logs API calls, not network traffic.
- ✓
VPC Traffic Mirroring
Why this is correct
Copies traffic for deep packet inspection.
- ✗
Amazon Inspector
Why it's wrong here
Security assessment tool, not traffic monitoring.
- ✓
VPC Flow Logs
Why this is correct
Captures metadata of IP traffic.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.