1. Your company has an EC2 Instance hosted in AWS. This EC2 Instance hosts an application. Currently this application Is experiencing a number of Issues. You need to inspect the network packets to see what the ty of error that Is occurring? Which one of the below steps can help address this issue?

A) Use another instance. Setup a port to promiscuous mode? and sniff the traffic to analyze the packets
B) Use a network mentioning tool provided by an AWS(Amazon Web Service) partner.
C) Use VPC Flow Logs.
D) Use Cloud watch metric



2. You have setup an EC2 Instance that hosts a web application. You have set the following rules Security Group Rules o Allow Inbound Traffic on port 80 from 0.0.0.0/0 o Deny Outgoing Traffic NACL o Allow Inbound Traffic on port 80 from 0.0.0.0/0 o Deny Outgoing Traffic Users are complaining that they cannot access the web server. How can you ensure that the issue gets resolved?

A) Allow Outgoing Traffic on the NACL for port 80
B) Allow Outgoing Traffic on the Security groups for ephemeral ports
C) Allow Outgoing Traffic on the NACL for ephemeral ports
D) Allow Outgoing Traffic on the Security groups for port 80



3. Your team is using a NAT instance on an Linux EC2 Instance. The private subnet has a route added for S 0.0.0.0/0 for the NAT Instance. This NAT Instance Is being used to download updates from the Internet for instances In the private subnet. But the IT administrators who are in charge of applying the updates complain of slow response times. What can be done to rectify this issue? Choose 2 answers from the options given below(Select 2answers)

A) Upgrade the NAT instance to a larger instance type
B) Move the NAT instance to the private subnet to be closer the instances
C) Add another NAT instance. Add another route for 0.0.0.0/0 to the new NAT instance
D) Replace the NAT instance with a NAT gateway



4. You are trying to diagnose a connection issue with a Linux instance. The instance is assigned a public IP and is in the public subnet. You can also see that the Internet gateway is attached and the route tables are in place. You SSH into the Instance from a bastion host. You then do an lf config and see that the Interface does not have a public IP address. What should be done next to check the issue ?

A) Assign an Elastic IP to the interface
B) Assign the public IP to the interface
C) Assign a private P to the interface
D) Check the Security Groups for the instance



5. You need to perform a deep packet analysis for packets that are being sent to your EC2 Instance. Which of the following can help you accomplish this?

A) AWS VPC Flow Logs
B) AWS Cloud Trail
C) AWS Cloud Watch
D) Wire shark