ANS-C01 · Question #184
A company hosts a web application that runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The company uses an Amazon…
The correct answer is C. Configure the AWS WAF web ACL to deliver logs to an Amazon Kinesis Data Firehose delivery. To send logs to Amazon Kinesis Data Firehose, you send logs from your web ACL to an Amazon Kinesis Data Firehose with a configured storage destination. After you enable logging, AWS WAF delivers logs to your storage destination through the HTTPS endpoint of Kinesis Data Firehose.
Question
A company hosts a web application that runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The company uses an Amazon CloudFront distribution with the ALB as an origin. The application recently experienced an attack. In response, the company associated an AWS WAF web ACL with the CloudFront distribution. The company needs to use Amazon Athena to analyze application attacks that AWS WAF detects. Which solution will meet this requirement?
Options
- AConfigure the ALB and the EC2 instance subnets to produce VPC flow logs. Configure the VPC
- BCreate a trail in AWS CloudTrail to capture data events. Configure the trail to deliver logs to an
- CConfigure the AWS WAF web ACL to deliver logs to an Amazon Kinesis Data Firehose delivery
- DTurn on access logging for the ALB. Configure the access logs to deliver the logs to an Amazon
How the community answered
(44 responses)- A9% (4)
- B2% (1)
- C75% (33)
- D14% (6)
Explanation
To send logs to Amazon Kinesis Data Firehose, you send logs from your web ACL to an Amazon Kinesis Data Firehose with a configured storage destination. After you enable logging, AWS WAF delivers logs to your storage destination through the HTTPS endpoint of Kinesis Data Firehose.
Topics
Community Discussion
No community discussion yet for this question.