AWS Certified SysOps Administrator – Associate (legacy) — Question 927

After a network change, application servers cannot connect to the corresponding Amazon RDS MySQL database.
What should the SysOps Administrator analyze?

Answer options

• A. VPC Flow Logs
• B. Elastic Load Balancing logs
• C. Amazon CloudFront logs
• D. Amazon RDS MySQL error logs

Correct answer: A

Explanation

VPC Flow Logs enable the SysOps Administrator to capture and analyze IP traffic reaching the network interfaces, which helps diagnose whether security groups or network ACLs are blocking the database connections after the network change. Elastic Load Balancing and Amazon CloudFront logs monitor web-tier traffic rather than direct database connectivity. Amazon RDS MySQL error logs focus on database engine operations and errors, not network-level blockages preventing connection establishment.