Home › AWS Security › cloudcomputing › scsinfraiam › Which AWS feature lets a security engineer trace…
Which AWS feature lets a security engineer trace whether traffic from a source ENI to a destination ENI is permitted by route tables, SGs, and NACLs — without sending live packets?
AAmazon EBS
BAWS Snowball
CAmazon Route 53 health checks
DVPC Reachability Analyzer
Answer & Solution
Correct answer: D. VPC Reachability Analyzer
VPC Reachability Analyzer simulates VPC traffic flow (per SCS-C02 §3.4). The others can't trace VPC reachability.
Related questions
Which IAM feature lets an architect cap the MAXIMUM permissions an entity (user/role) can Which AWS service is the customer-identity-and-access-management (CIAM) service for consumWhich AWS service federates corporate identities (Active Directory, Okta, Azure AD) into AWhich AWS service is the canonical identity store for managing IAM users, roles, groups, aWhich AWS service is the managed stateful firewall for VPC traffic — supporting Suricata-cWhich AWS service provides centralised firewall management — deploying WAF rules, Shield AWhich AWS networking primitive is STATELESS, attached at the subnet level, supports both aWhich AWS networking primitive is STATEFUL, lives at the ENI level, allows traffic by allo