ANS-C01 Question 366
Select 3You are managing a multi-tier application hosted on AWS. Users are reporting intermittent connectivity issues when accessing the application. The application uses an Application Load Balancer (ALB) to distribute traffic to multiple EC2 instances in private subnets. You need to monitor and analyze network traffic to troubleshoot the issue and optimize connectivity patterns. Which AWS tools or methods should you use to identify the root cause and optimize traffic flow?
- A
Enable VPC Flow Logs for the subnets and analyze the logs in Amazon CloudWatch or S3
- B
Use AWS CloudTrail to track API calls made to the Application Load Balancer
- C
Enable access logs on the Application Load Balancer to examine traffic patterns and response codes
- D
Leverage Amazon CloudFront to cache and analyze traffic at edge locations
- E
Use the Reachability Analyzer in the VPC to identify potential connectivity issues between resources
Show answer and explanation
Correct answers: A, C, E
Explanation
To troubleshoot and optimize connectivity patterns, you must use tools that provide insights into network traffic and connectivity. VPC Flow Logs allow you to analyze traffic flow within your VPC. ALB access logs provide detailed information about incoming traffic and response behavior. The Reachability Analyzer helps identify connectivity issues between resources in your VPC. Together, these tools allow for efficient troubleshooting and optimization of the network.
- A. Correct.
Enabling VPC Flow Logs allows you to capture detailed information about IP traffic going to and from your subnets. This helps in identifying network traffic patterns, anomalies, or potential connectivity issues.
- B. Incorrect.
AWS CloudTrail is used for tracking API calls and changes to AWS resources but does not provide insights into actual network traffic or connectivity issues.
- C. Correct.
Enabling access logs on the ALB helps you analyze incoming requests, their response codes, and latency metrics. This is vital for troubleshooting intermittent connectivity issues.
- D. Incorrect.
Amazon CloudFront is used for content delivery and caching. While it can optimize latency for global users, it is not directly relevant for analyzing traffic within a VPC or identifying root causes of connectivity issues.
- E. Correct.
The Reachability Analyzer helps identify connectivity issues by analyzing the network path between AWS resources. It is a key tool for troubleshooting connectivity problems.