nerdexam
Amazon

SAP-C02 · Question #92

A company is running an application distributed over several Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The security team requires that all application access…

The correct answer is C. Enable access logs for the Application Load Balancer, and publish the logs to an Amazon S3. https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-

Submitted by devops_kid· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

A company is running an application distributed over several Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The security team requires that all application access attempts be made available for analysis. Information about the client IP address, connection type, and user agent must be included. Which solution will meet these requirements?

Options

  • AEnable EC2 detailed monitoring, and include network logs. Send all logs through Amazon Kinesis
  • BEnable VPC Flow Logs for all EC2 instance network interfaces. Publish VPC Flow Logs to an
  • CEnable access logs for the Application Load Balancer, and publish the logs to an Amazon S3
  • DEnable Traffic Mirroring and specify all EC2 instance network interfaces as the source. Send all

How the community answered

(35 responses)
  • A
    11% (4)
  • B
    9% (3)
  • C
    77% (27)
  • D
    3% (1)

Explanation

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice