A company has Amazon EC2 instances that serve web content behind an Elastic Load Balancing (ELB) load balancer. The ELB Amazon CloudWatch metrics from a few hours ago indicate a significant number of 4XX errors. The EC2 instances from the time of these errors have been deleted. At the time of the 4XX errors, how can an Administrator obtain information about who originated these requests?
A) If ELB access logs have been enabled, the information can be retrieved from the S3 bucket
B) Contact AWS Support to obtain application logs from the deleted instances
C) Amazon S3 always keeps a backup of application logs from EC2 instances. Retrieve these logs for analysis
D) Use AWS Trusted Advisor to obtain ELB access logs

Question

Quizplus · Accepted Answer

If ELB access logs have been enabled, they are stored in an S3 bucket, and these logs contain information about the requests, including the source IP address, which can help identify who originated the requests.

A Company Has Amazon EC2 Instances That Serve Web Content