A three-tier application uses an Application Load Balancer (ALB), EC2 instances, and Amazon RDS. A Route 53 alias record points to the ALB. When accessing the ALB from a laptop, the request times out. Which logs should the developer check to confirm whether the request reached the AWS network?
Choose an answer
Tap an option to check your answer.
Correct answer: VPC Flow Logs.
Why this is the answer
VPC Flow Logs record all IP traffic going to and from network interfaces in your VPC. If a request times out before reaching the ALB, Flow Logs will show whether the request even entered the AWS network and reached the ALB's network interface. This helps differentiate between network connectivity issues and problems within the application or ALB itself. Amazon Route 53 logs track DNS queries, not network traffic, so they wouldn't show if the request reached AWS. AWS Systems Manager Agent logs and Amazon CloudWatch Agent logs are for monitoring EC2 instances and applications running on them, meaning the request would have already successfully reached the EC2 instance, which is not the case if the ALB times out.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed