DOP-C02 · Question #118
A company's DevOps engineer is working in a multi-account environment. The company uses AWS Transit Gateway to route all outbound traffic through a network operations account. In the network…
The correct answer is B. Create an Amazon CloudWatch metric filter by using a search for CRITICAL events. Publish a custom. The logs from the firewall appliance are already being sent to Amazon CloudWatch Logs. So , The best approach to meet the given requirements is to create an Amazon CloudWatch metric filter by using a search for CRITICAL events
Question
A company's DevOps engineer is working in a multi-account environment. The company uses AWS Transit Gateway to route all outbound traffic through a network operations account. In the network operations account, all account traffic passes through a firewall appliance for inspection before the traffic goes to an internet gateway. The firewall appliance sends logs to Amazon CloudWatch Logs and includes event severities of CRITICAL, HIGH, MEDIUM, LOW, and INFO. The security team wants to receive an alert if any CRITICAL events occur. What should the DevOps engineer do to meet these requirements?
Options
- ACreate an Amazon CloudWatch Synthetics canary to monitor the firewall state. If the firewall reaches a
- BCreate an Amazon CloudWatch metric filter by using a search for CRITICAL events. Publish a custom
- CEnable Amazon GuardDuty in the network operations account. Configure GuardDuty to monitor flow
- DUse AWS Firewall Manager to apply consistent policies across all accounts. Create an Amazon
How the community answered
(47 responses)- A15% (7)
- B74% (35)
- C6% (3)
- D4% (2)
Explanation
The logs from the firewall appliance are already being sent to Amazon CloudWatch Logs. So , The best approach to meet the given requirements is to create an Amazon CloudWatch metric filter by using a search for CRITICAL events
Topics
Community Discussion
No community discussion yet for this question.