nerdexam
Amazon

DOP-C02 · Question #206

A company uses AWS WAF to protect its cloud infrastructure. A DevOps engineer needs to give an operations team the ability to analyze log messages from AWS WAF. The operations team needs to be able…

The correct answer is A. Create an Amazon CloudWatch Logs log group. Configure the appropriate AWS WAF web ACL. https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-creating.html

Submitted by krish.m· Mar 6, 2026Monitoring and Logging

Question

A company uses AWS WAF to protect its cloud infrastructure. A DevOps engineer needs to give an operations team the ability to analyze log messages from AWS WAF. The operations team needs to be able to create alarms for specific patterns in the log output. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • ACreate an Amazon CloudWatch Logs log group. Configure the appropriate AWS WAF web ACL
  • BCreate an Amazon OpenSearch Service cluster and appropriate indexes. Configure an Amazon
  • CCreate an Amazon S3 bucket for the log output. Configure AWS WAF to send log outputs to the
  • DCreate an Amazon S3 bucket for the log output. Configure AWS WAF to send log outputs to the

How the community answered

(23 responses)
  • A
    74% (17)
  • B
    17% (4)
  • C
    4% (1)
  • D
    4% (1)

Explanation

https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-creating.html

Topics

#AWS WAF#CloudWatch Logs#log analysis#alarms#operational overhead

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice