AWS Certified Advanced Networking – Specialty (ANS-C01) — Question 68

A company has deployed a web application on AWS. The web application uses an Application Load Balancer (ALB) across multiple Availability Zones. The targets of the ALB are AWS Lambda functions. The web application also uses Amazon CloudWatch metrics for monitoring.
Users report that parts of the web application are not loading properly. A network engineer needs to troubleshoot the problem. The network engineer enables access logging for the ALB.
What should the network engineer do next to determine which errors the ALB is receiving?

Answer options

• A. Send the logs to Amazon CloudWatch Logs. Review the ALB logs in CloudWatch Insights to determine which error messages the ALB is receiving.
• B. Configure the Amazon S3 bucket destination. Use Amazon Athena to determine which error messages the ALB is receiving.
• C. Configure the Amazon S3 bucket destination. After Amazon CloudWatch Logs pulls the ALB logs from the S3 bucket automatically, review the logs in CloudWatch Logs to determine which error messages the ALB is receiving.
• D. Send the logs to Amazon CloudWatch Logs. Use the Amazon Athena CloudWatch Connector to determine which error messages the ALB is receiving.

Correct answer: B

Explanation

The correct answer is B, as it involves configuring an Amazon S3 bucket to store the logs, which can then be queried using Amazon Athena. This method allows for flexible analysis of the log data. The other options either rely on CloudWatch Logs, which is not the most effective method for accessing ALB logs directly, or incorrectly suggest processes that do not align with the recommended best practices for analyzing ALB access logs.