AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 152

You need to create a baseline of normal traffic flow in order to implement some security changes to your organization.
What two items would be best to use? (Choose two.)

Answer options

• A. Wireshark
• B. CloudTrail
• C. An IDS
• D. CloudWatch

Correct answer: C, D

Explanation

An IDS (Intrusion Detection System) monitors network traffic for suspicious activity, making it ideal for establishing a traffic baseline. CloudWatch provides insights into resource utilization and performance, which also contributes to understanding normal traffic flow. Wireshark, while useful for packet analysis, is not as effective for creating a traffic baseline, and CloudTrail focuses on API call logging rather than network traffic.