AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 299

Which service would you use to see the DSCP value in a packet header?

Answer options

• A. CloudTrail
• B. Config
• C. Flow Logs
• D. None of the above

Correct answer: D

Explanation

None of the listed AWS services can inspect the DSCP value in a packet header. CloudTrail tracks API activity, Config monitors resource configurations, and VPC Flow Logs record metadata about IP traffic but do not capture specific packet header fields like DSCP. To view DSCP values, you would need to capture packets directly on the EC2 instances using tools like Wireshark or tcpdump.