Your company hosts an application on AWS EC2 Instance. Currently, the application is experiencing several issues and you need to inspect the network packets by analyzing some logs to find out the error. Which of the following steps can help to address this issue?

Answer options:

A.Use VPC Flow Logs.
B.Use a network monitoring tool provided by an AWS partner.
C.Use another instance. Setup a port to “promiscuous mode” and sniff the traffic to analyze the packets.
D.Use CloudWatch metric.

Answer – B
Since you need to sniff the actual network packets, the ideal approach would be to use a network monitoring tool provided by an AWS partner.
The AWS documentation mentions the following.
Multiple AWS Partner Network members offer virtual firewall appliances that can be deployed as an in-line gateway for inbound or outbound network traffic. Firewall appliances provide additional application-level filtering, deep packet inspection, IPS/IDS, and network threat protection features.
Options A and D are invalid because they cannot be used for packet inspection.
Option C is invalid because the promiscuous mode is not supported in AWS.
For more information on the security capabilities, please visit the below URL:
https://aws.amazon.com/answers/networking/vpc-security-capabilities/