ANS-C01 Question 365
Select 2You are responsible for managing a VPC in your company's AWS environment, and users are reporting intermittent connectivity issues when accessing an application hosted on an EC2 instance behind an Application Load Balancer (ALB). You need to monitor and analyze network traffic to troubleshoot the issue. Which of the following actions should you take to identify and resolve the problem? (Choose TWO)
- A
Enable VPC Flow Logs for the VPC and analyze the logs for traffic patterns and possible errors.
- B
Use AWS CloudTrail to trace API calls made to the Application Load Balancer and identify potential configuration changes.
- C
Capture and analyze traffic using AWS Traffic Mirroring for the EC2 instance to identify any packet-level issues.
- D
Check the Route 53 health checks for the ALB to verify DNS resolution problems.
- E
Enable AWS Config to monitor compliance rules for the VPC and subnets hosting the ALB.
Show answer and explanation
Correct answers: A, C
Explanation
To effectively monitor and analyze network traffic to troubleshoot intermittent connectivity issues, you should use tools that provide detailed insights into the flow of traffic and packet-level analysis. VPC Flow Logs give visibility into network traffic patterns and potential errors like dropped packets or misconfigurations. AWS Traffic Mirroring complements this by enabling packet-level inspection to identify deeper network issues. Together, these tools provide a comprehensive approach to diagnosing and resolving connectivity problems.
- A. Correct.
VPC Flow Logs capture information about IP traffic going to and from network interfaces in the VPC. Analyzing these logs can help identify dropped packets, misconfigured security groups, or network ACLs that may be causing connectivity issues.
- B. Incorrect.
AWS CloudTrail tracks API calls but does not provide detailed network traffic analysis, so it's not directly useful for identifying intermittent connectivity issues in this scenario.
- C. Correct.
AWS Traffic Mirroring allows you to capture and inspect network traffic at the packet level, which is useful for diagnosing intermittent connectivity issues or protocol-level problems.
- D. Incorrect.
Route 53 health checks are useful for verifying DNS resolution or endpoint health but are not directly related to analyzing network traffic or troubleshooting intermittent connectivity issues in this case.
- E. Incorrect.
AWS Config is used for compliance and configuration monitoring but does not provide network traffic analysis capabilities relevant to this scenario.