ANS-C01 Question 476
Select 3Your company has a hybrid cloud architecture where an application is hosted on both AWS and on-premises servers. The application is fronted by an Application Load Balancer (ALB) in AWS and uses Amazon CloudFront for caching. To troubleshoot intermittent performance issues reported by users, your team needs to analyze incoming requests and their paths across the system. Which logging mechanisms should you enable to gather the necessary insights?
- A
Enable CloudFront access logs to capture requests at the edge locations.
- B
Enable ALB access logs to capture information about incoming requests to the load balancer.
- C
Enable VPC Flow Logs to capture detailed packet-level data for traffic entering and leaving the VPC.
- D
Enable AWS CloudTrail logging to capture detailed application-level activity logs.
- E
Enable S3 bucket logging to capture requests made to S3 buckets used by the application.
Show answer and explanation
Correct answers: A, B, C
Explanation
To effectively troubleshoot performance issues in this scenario, you need to analyze logs at multiple levels: edge (CloudFront), application load balancing (ALB), and network (VPC Flow Logs). Each of these logging mechanisms provides critical insights into different parts of the request path, helping you identify where the bottleneck or issue might be. CloudTrail and S3 bucket logging, while useful for specific purposes, do not provide the necessary insights for this scenario.
- A. Correct.
CloudFront access logs provide detailed information about requests that are processed by CloudFront, including request URLs, response times, and cache hit/miss statuses. This is useful for understanding traffic patterns at the edge.
- B. Correct.
ALB access logs capture details about requests received by the load balancer, such as client IP addresses, request paths, and response times. This is essential for troubleshooting performance issues related to the load balancer.
- C. Correct.
VPC Flow Logs capture metadata about IP traffic going to and from network interfaces within your VPC. This can help identify network-level bottlenecks or connectivity issues.
- D. Incorrect.
AWS CloudTrail logging is primarily used to track API calls and user activity across AWS services. While it is useful for auditing purposes, it does not provide the level of detail required to troubleshoot performance issues in this scenario.
- E. Incorrect.
S3 bucket logging tracks access requests to S3 buckets but does not provide insights into application-level traffic or performance issues.