ANS-C01 Question 473
Select 3You are a network administrator managing an e-commerce application hosted on AWS. To troubleshoot intermittent connectivity issues, you need to analyze the traffic patterns, including source IPs, destinations, and error rates. The application uses an Application Load Balancer (ALB) and CloudFront as a CDN. Which logging features should you enable to gather the required data?
- A
Enable VPC Flow Logs on the subnets where the ALB is deployed.
- B
Enable access logging on the Application Load Balancer (ALB).
- C
Enable AWS CloudTrail logging to monitor API calls.
- D
Enable CloudFront access logs.
- E
Enable S3 bucket access logs for data storage insights.
Show answer and explanation
Correct answers: A, B, D
Explanation
To troubleshoot traffic patterns and connectivity issues for the e-commerce application, you need to use logging features that provide detailed insights into traffic flow and request behavior. VPC Flow Logs help analyze IP traffic within your network, ALB access logs capture detailed information about traffic at the load balancer level, and CloudFront access logs provide visibility into CDN traffic. CloudTrail and S3 bucket access logs are not relevant to this scenario as they serve different purposes.
- A. Correct.
VPC Flow Logs provide detailed information about IP traffic going to and from network interfaces within your VPC. Enabling them on the subnets where the ALB is deployed allows you to capture source IPs, destinations, and traffic patterns.
- B. Correct.
ALB access logging captures detailed information about requests sent to the load balancer, including client IPs, HTTP methods, and response codes. This is crucial for analyzing error rates and traffic behavior.
- C. Incorrect.
AWS CloudTrail logs are primarily used to monitor API calls and changes to AWS resources. While useful for security and auditing, they do not provide detailed traffic patterns or connectivity troubleshooting data.
- D. Correct.
CloudFront access logs contain detailed information about requests made to your CloudFront distributions, including the source IP address, request URL, and response code. This is essential for analyzing traffic patterns through the CDN.
- E. Incorrect.
S3 bucket access logs provide insights into requests made to your S3 bucket. While useful for monitoring bucket activity, they do not help with analyzing traffic patterns or connectivity issues for the application.