A network engineer needs to implement a cloud-native solution. The solution must allow the recording of network conversation metadata of the host and appliances attached to a VPC. Which of the following will accomplish these goals with the least effort?
Correct Answer: A
Comprehensive and Detailed Explanation From Exact Extract:
Network flow logging (e.g., AWS VPC Flow Logs, Azure NSG Flow Logs, or GCP VPC Flow Logs) is a cloud-native feature that records metadata about network conversations, including source and destination IPs, ports, and traffic volume. It does not capture payloads but provides detailed flow-level insight without requiring agents or intrusive configuration changes, making it the most efficient and least effort solution.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Cloud-native Network Monitoring":
"Network flow logging provides metadata about traffic within cloud VPCs and is used for visibility, troubleshooting, and security auditing without packet inspection." Other options:
* B. SNMP traps monitor device health, not traffic flows.
* C. QoS tagging controls traffic priority but doesn't log flows.
* D. Monitoring agents collect system-level metrics and logs, but require installation and configuration.
