ANS-C01 Question 363
Select 2Your organization has deployed a multi-tier application in AWS across multiple Availability Zones. Users report intermittent delays when accessing the application. You are tasked with identifying the source of the delays and optimizing connectivity patterns. Which of the following steps will help you monitor and analyze the network traffic to troubleshoot the issue?
- A
Enable VPC Flow Logs to capture traffic information for the related subnets and analyze them for anomalies.
- B
Use AWS CloudTrail to log and analyze API calls related to the application infrastructure.
- C
Leverage Amazon VPC Traffic Mirroring to capture and inspect packet-level data from the application instances.
- D
Enable AWS Global Accelerator to automatically optimize the routing of traffic to the application.
- E
Deploy Amazon CloudWatch Logs Insights to query and analyze the logs generated by the application security groups.
Show answer and explanation
Correct answers: A, C
Explanation
To troubleshoot and optimize connectivity patterns, you need tools that provide insight into network traffic. VPC Flow Logs allow you to monitor traffic at the subnet or network interface level, helping identify anomalies. VPC Traffic Mirroring enables deep packet inspection, which can reveal underlying network issues contributing to delays. These tools together provide comprehensive visibility into network traffic.
- A. Correct.
Enabling VPC Flow Logs provides visibility into IP traffic going to and from network interfaces in your VPC. This is useful for identifying abnormal traffic patterns or delays.
- B. Incorrect.
AWS CloudTrail logs API activity, which is not directly related to network traffic monitoring and analysis. It is more useful for security and compliance auditing.
- C. Correct.
Amazon VPC Traffic Mirroring provides packet-level visibility, allowing you to deeply analyze network traffic and detect issues such as latency or dropped packets.
- D. Incorrect.
AWS Global Accelerator is a routing optimization service, but it is not used for monitoring or analyzing existing network traffic.
- E. Incorrect.
Amazon CloudWatch Logs Insights is a tool for analyzing log data, but it is not directly relevant to network traffic analysis and optimization.