Match each AWS VPC flow log type to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Capture IP traffic for a VPC
Capture IP traffic for a subnet
Capture IP traffic for a network interface
Capture IP traffic for a transit gateway
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
VPC flow logs: Captures network traffic to and from all network interfaces in a VPC
AWS VPC flow logs can be created at three levels: VPC (captures traffic for all interfaces in the VPC), subnet (captures traffic for interfaces in a specific subnet), and ENI (captures traffic for a single elastic network interface). Common confusions include mistaking the scope of each log type.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
VPC flow logs: Captures network traffic to and from all network interfaces in a VPC
Why this is correct
VPC flow logs are created at the VPC level and capture traffic for all interfaces in that VPC.
Subnet flow logs: Captures network traffic to and from all network interfaces in a specific subnet
Why this is correct
Subnet flow logs are scoped to a particular subnet, capturing traffic for interfaces within it.
ENI flow logs: Captures network traffic to and from a specific elastic network interface
Why this is correct
ENI flow logs are the most granular, tracking traffic for a single network interface.
VPC flow logs: Captures network traffic for a specific subnet only
Why it's wrong here
Incorrect — VPC flow logs cover all subnets in the VPC, not a single subnet.
Subnet flow logs: Captures network traffic for a specific ENI only
Why it's wrong here
Incorrect — subnet flow logs include all ENIs in the subnet, not just one.
Visual reference
Go deeper
About these practice questions
Courseiva writes every SCS-C02 question from scratch — 376 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SCS-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCS-C02 exam.