ANS-C01 · Question #10
A company has deployed an AWS Network Firewall firewall into a VPC. A network engineer needs to implement a solution to deliver Network Firewall flow logs to the company's Amazon OpenSearch Service…
The correct answer is B. Create an Amazon Kinesis Data Firehose delivery stream that includes the Amazon OpenSearch. Network Firewall supports Amazon Kinesis Data Firehose as one of the logging destinations. The timing of Network Firewall log delivery varies by location type, averaging 3-6 minutes for Amazon CloudWatch Logs and Amazon Kinesis Data Firehose and 8-12 minutes for Amazon Simple…
Question
A company has deployed an AWS Network Firewall firewall into a VPC. A network engineer needs to implement a solution to deliver Network Firewall flow logs to the company's Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster in the shortest possible time. Which solution will meet these requirements?
Options
- ACreate an Amazon S3 bucket. Create an AWS Lambda function to load logs into the Amazon
- BCreate an Amazon Kinesis Data Firehose delivery stream that includes the Amazon OpenSearch
- CConfigure flow logs for the firewall. Set the Amazon OpenSearch Service (Amazon Elasticsearch
- DCreate an Amazon Kinesis data stream that includes the Amazon OpenSearch Service (Amazon
How the community answered
(24 responses)- A8% (2)
- B67% (16)
- C21% (5)
- D4% (1)
Explanation
Network Firewall supports Amazon Kinesis Data Firehose as one of the logging destinations. The timing of Network Firewall log delivery varies by location type, averaging 3-6 minutes for Amazon CloudWatch Logs and Amazon Kinesis Data Firehose and 8-12 minutes for Amazon Simple Storage Service buckets. https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-logging.html
Topics
Community Discussion
No community discussion yet for this question.