Q498. A company hosts a web application that runs on a group of Amazon EC2 instances that are behind an Application Load Balancer (ALB) in a VPC. The company wants to analyze the network payloads to reverse- engineer a sophisticated attack of the application.Which approach should the company take to achieve this goal?
A.Enable VPC Flow Logs. Store the flow logs in an Amazon S3 bucket for analysis B.Enable Traffic Mirroring on the network interface of the EC2 instances Send the mirrored traffic to a target for storage and analysis. C.Create an AWS WAF web ACL and associate it with the ALB Configure AWS WAF logging. D.Enable logging for the ALB. Store the logs in an Amazon S3 bucket for analysis.正确答案B
