Question 1mediummultiple choice
Full question →Question 92 of 315
mediummultiple choiceObjective-mapped
SOA-C02 Practice Question: ALB access logs for diagnosing 502 errors without…
This SOA-C02 practice question tests your understanding of alb access logs for diagnosing 502 errors without…. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. A key principle to apply: aLB access logs. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Users are intermittently reporting 502 Bad Gateway errors when accessing the application through an Application Load Balancer. The team needs to identify which target IPs are associated with the failures and the request processing time for those requests. Application logs on instances do not capture failures before the ALB connection. What should be enabled?
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
A
Best answer
Enable ALB access logs, specify an S3 bucket destination, and query the logs to filter on elb_status_code=502
Access logs capture every ALB request including 502s. Each log entry contains the target_ip:target_port field identifying which instance handled (or failed to handle) the request, and request_processing_time and target_processing_time values for performance analysis. This data is available without any changes to instance-side software.
B
Distractor review
Enable AWS X-Ray on the ALB to trace each request end-to-end from client to target
AWS X-Ray traces application-level requests but requires SDK instrumentation in the application code to produce meaningful traces. X-Ray does not trace at the ALB level — it traces within the application running on the target. If the application is not instrumented and X-Ray is not enabled on the ALB (which requires Application Load Balancer with X-Ray sampling, a separate feature), no traces are produced at the load balancer layer.
C
Distractor review
Configure a VPC Flow Log on the subnets containing the ALB to capture all network traffic
VPC Flow Logs record IP-level packet metadata (source IP, destination IP, port, protocol, bytes, packets, action). They do not record HTTP-level details like status codes, HTTP methods, URLs, or processing times. Diagnosing 502s requires HTTP-level data, which only ALB access logs provide.
D
Distractor review
Install an agent on the application instances that logs all incoming connection attempts from the ALB
502 errors from the ALB often occur because the target closed the connection, rejected it, or did not respond before the idle timeout. In many 502 cases, the instance-side agent would not log anything — the connection failure happens before or without the application receiving the request.
Common exam trap
Common exam trap: answer the scenario, not the keyword
Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.
Technical deep dive
How to think about this question
Treat this as a scenario question. Identify the problem, the constraint, and the best action. Then compare each option against those facts.
KKey Concepts to Remember
- ALB access logs
- S3 logging bucket
- 502 Bad Gateway diagnosis
- request processing time
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
ALB access logs
Related practice questions
Related SOA-C02 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A company uses Amazon CloudFront to deliver content to a global audience. The origin is an Application Load Balancer in us-east-1. The SysOps administrator wants to reduce costs by minimizing the number of requests that reach the origin server. Which action should the administrator take?
Question 2
A company runs a batch processing application on Amazon EC2 that runs for 2 hours every night. The workload can tolerate interruptions. Which EC2 purchasing option provides the lowest cost for this use case?
Question 3
A SysOps administrator needs to monitor the CPU utilization of an Amazon RDS DB instance and receive an alarm when CPU utilization exceeds 80% for 5 consecutive minutes. Which AWS service should be used to create this alarm?
Question 4
A company runs a critical web application on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application uses session stickiness (sticky sessions) to maintain user sessions. The SysOps administrator notices that when instances are replaced during a scale-in or failure event, users lose their session data. The administrator needs to preserve session data across instance failures without losing stickiness benefits. What should the administrator do?
Question 5
A company runs a production web application on a single Amazon EC2 instance. The application experiences a predictable and steady workload 24/7. The SysOps administrator wants to minimize compute costs for this instance while ensuring it remains available during the expected workload. Which EC2 purchasing option should the administrator use?
Question 6
A company has a VPC with public and private subnets. The private subnets host application servers that need to make outbound HTTPS connections to the internet. The SysOps administrator must implement a solution that provides outbound internet connectivity while preventing inbound connections from the internet. Additionally, the solution must allow the company to control which domains the application servers can access. Which solution should the administrator implement?
Practice this exam
Start a free SOA-C02 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this SOA-C02 question test?
ALB access logs
What is the correct answer to this question?
The correct answer is: Enable ALB access logs, specify an S3 bucket destination, and query the logs to filter on elb_status_code=502 — ALB access logs record detailed information for every request processed by the load balancer, including timestamp, client IP, target IP and port, response code, request processing time (from receipt to last byte sent), backend processing time (from first byte sent to first byte received from target), and target status code. 502 errors appear in the logs with target_status_code=502 or target_status_code=- (if the target closed the connection prematurely). Access logs are written to an S3 bucket in Elastic Load Balancing's log format, typically within 5 minutes of the events.
What should I do if I get this SOA-C02 question wrong?
Review aLB access logs, then practise related SOA-C02 questions on the same topic to reinforce the concept.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Discussion
Loading comments…
Sign in to join the discussion.
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.