You have set up a web server with an Auto-scaling group & Application Load Balancer in the front end. As a part of the Security requirement, you need to capture all traffic flowing between the client & web server. You are planning to enable Access logs on Application Load Balancer. But you are uncertain about the traffic captured by enabling this log. Which of the following is true concerning Access logs entries for Application Load Balancer?

Answer options:

A.It does not log health check requests from Application Load Balancer to the target group.
B.It does not log WSS (web socket over SSL/TLS) traffic between client & target group.
C.It does not capture malformed requests from clients to the target server.
D.It does not log traffic when there are no healthy targets remaining to respond to client requests.

Correct Answer: A
Application Load Balancer Access logs consist of all requests that are not forward to Targets, but not the health check request that ALB periodically sends to the target group.
Option B is incorrect as if access logs are enabled for Application Load Balancer. It captures traffic which consists of WSS (web socket over SSL/TLS)traffic between client & target server.
Option C is incorrect as any malformed requests from clients are captured in Access logs but are not forwarded to the target group.
Option D is incorrect as if no healthy targets are remaining, Application Load Balancer will capture those requests in access logs but never forward them to target.
For more information on access logs for Application Load Balancer, refer to the following URL-
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html