ANS-C01 Question 475
Select 3Your organization runs a global e-commerce platform on AWS. As part of a security audit, the team wants to analyze traffic patterns and troubleshoot potential issues with specific requests made to your application. You are asked to enable logging for several AWS services to capture the necessary data for analysis. Which of the following AWS logging services should you configure to meet the requirement?
- A
Enable VPC Flow Logs to capture IP traffic information at the network interface level.
- B
Enable CloudFront access logs to capture detailed request information for cached and non-cached content.
- C
Enable ELB (Elastic Load Balancer) access logs to capture information about requests sent to the load balancer.
- D
Enable AWS CloudTrail to capture detailed API call history for your account.
- E
Enable S3 Server Access Logs to capture information about requests to your S3 buckets.
Show answer and explanation
Correct answers: A, B, C
Explanation
To analyze traffic patterns and troubleshoot specific requests in your application, you need to enable logging services that capture detailed traffic or request-level data. VPC Flow Logs provide network-level traffic insights, CloudFront access logs provide request-level data for the CDN, and ELB access logs provide request-level data at the load balancer level. CloudTrail and S3 Server Access Logs, while useful for other purposes, do not meet the requirements for this scenario.
- A. Correct.
Correct. VPC Flow Logs provide detailed information about IP traffic to and from network interfaces in your VPC, which can help analyze traffic patterns and troubleshoot connectivity issues.
- B. Correct.
Correct. CloudFront access logs record detailed request information, such as request URLs, client IPs, and user agents, making it valuable for understanding traffic patterns to your application.
- C. Correct.
Correct. ELB access logs capture detailed information about requests sent to the load balancer, such as request timestamps, client IPs, and back-end responses, which are useful for troubleshooting and analysis.
- D. Incorrect.
Incorrect. While AWS CloudTrail logs API calls for your account, it does not provide the granular traffic or request-level data needed for analyzing traffic patterns or troubleshooting network issues.
- E. Incorrect.
Incorrect. S3 Server Access Logs are specific to monitoring access to S3 buckets and are not relevant to analyzing traffic patterns or troubleshooting issues with requests to your application.