Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Advanced Networking - Specialty · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A Kinesis Data Firehose delivery stream is used to receive log records from AWS WAF. An IAM role for the Kinesis Data Firehose delivery stream, with permissions needed to invoke Lambda and write to S3. A Lambda function used to filter out WAF records matching the default action before the records are written to S3. An IAM role for the Lambda function, with the permissions needed to create CloudWatch logs (for troubleshooting). An S3 bucket where the WAF logs will be stored.
Options A and D suggest using VPC flow logs and ALB access logs, respectively. While these logs are valuable for specific purposes (network analysis and access patterns), they do not capture the detailed information about web requests and attacks that are logged by AWS WAF. Option B involves AWS CloudTrail, which is more focused on auditing API calls rather than capturing detailed web request information. Therefore, for analyzing application attacks detected by AWS WAF, configuring AWS WAF logs to be delivered to an Amazon Kinesis Data Firehose stream is the recommended approach.
agreed - C