DOP-C02 · Question #388
A DevOps engineer uses AWS WAF to manage web ACLs across an AWS account. The DevOps engineer must ensure that AWS WAF is enabled for all Application Load Balancers (ALBs) in the account. The DevOps…
The correct answer is A. Enable AWS Config. Add the alb-waf-enabled managed rule. Create an AWS Systems Manager. The most operationally efficient way to ensure AWS WAF remains attached to all ALBs is to use AWS Config with an automated remediation action via AWS Systems Manager Automation. 1. AWS Config Managed Rule (alb-waf-enabled) This continuously monitors whether AWS WAF is enabled…
Question
A DevOps engineer uses AWS WAF to manage web ACLs across an AWS account. The DevOps engineer must ensure that AWS WAF is enabled for all Application Load Balancers (ALBs) in the account. The DevOps engineer uses an AWS CloudFormation template to deploy an individual ALB and AWS WAF as part of each application stack's deployment process. If AWS WAF is removed from the ALB after the ALB is deployed, AWS WAF must be added to the ALB automatically. Which solution will meet these requirements with the MOST operational efficiency?
Options
- AEnable AWS Config. Add the alb-waf-enabled managed rule. Create an AWS Systems Manager
- BEnable AWS Config. Add the alb-waf-enabled managed rule. Create an Amazon EventBridge rule
- CConfigure an Amazon EventBridge rule to periodically call an AWS Lambda function that calls the
- DConfigure an Amazon EventBridge rule to periodically call an AWS Lambda function that calls the
How the community answered
(28 responses)- A68% (19)
- B4% (1)
- C11% (3)
- D18% (5)
Explanation
The most operationally efficient way to ensure AWS WAF remains attached to all ALBs is to use AWS Config with an automated remediation action via AWS Systems Manager Automation. 1. AWS Config Managed Rule (alb-waf-enabled) This continuously monitors whether AWS WAF is enabled for all ALBs in the account. 2. Automated Remediation AWS Config allows setting up automatic remediation using an AWS Systems Manager Automation Document. This document can automatically reassociate AWS WAF to an ALB when it is removed. This detects configuration drift and auto-remediates it without requiring manual intervention.
Topics
Community Discussion
No community discussion yet for this question.