MENU
A company uses AWS WAF to protect its cloud infrastructure. A DevOps engineer needs to give an operations team the ability to analyze log messages from AWS WAR. The operations team needs to be able to create alarms for specific patterns in the log output.
Which solution will meet these requirements with the LEAST operational overhead?
Suggested Answer: A
Get Premium DOP-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Step 2: Creating CloudWatch Metric Filters CloudWatch metric filters can be used to search for specific patterns in log data. The operations team can create filters for certain log patterns and set up alarms based on these filters.
Action: Instruct the operations team to create CloudWatch metric filters to detect patterns in the WAF log output.
Why: Metric filters allow the team to trigger alarms based on specific patterns without needing to manually search through logs.
This corresponds to Option A: Create an Amazon CloudWatch Logs log group. Configure the appropriate AWS WAF web ACL to send log messages to the log group. Instruct the operations team to create CloudWatch metric filters.
30 comments · newest first
MA
Marget
11 months ago
C seems complicated with Lambda, I’d stick with A.
ST
Stephaine
11 months ago
B sounds more robust with OpenSearch, but more setup.
MA
Margart
11 months ago
I’m not sure about A, what if the logs get too big?
KA
Katina
11 months ago
Totally agree, less overhead for sure!
IZ
Izetta
12 months ago
Option A seems the simplest, just use CloudWatch.
DE
Desiree
12 months ago
I recall that using Athena with S3 was mentioned in our study materials, but I wonder if writing SQL queries would be too much for the operations team.
WI
Winifred
1 year ago
I feel like option C could work, but the Lambda functions add extra steps. I’m not sure if that’s the least operational overhead.
CA
Candra
1 year ago
I'm not entirely sure, but I remember something about using OpenSearch for log analysis in a similar question. It seemed more complex though.
AR
Argelia
1 year ago
I think option A makes the most sense since it directly integrates with CloudWatch, which we practiced a lot in our labs.
GE
Germaine
1 year ago
I'm leaning towards option D with Athena. That would give the operations team the ability to run custom SQL queries on the log data, which could be really powerful. The only downside is they'd have to manage the Athena setup, but it might be worth it for the flexibility.
RO
Romana
1 year ago
Option C with Lambda functions and SNS seems a bit overkill for this use case. It would add more complexity than is necessary. I'd lean towards either A or D - the CloudWatch Logs or Athena approach seem like the simplest solutions to meet the requirements.
JA
Janessa
1 year ago
Hmm, I'm a bit unsure about this one. Option B with OpenSearch Service seems like it could be a good choice too, as it would give the operations team more flexibility to create custom dashboards and visualizations. But I'm not as familiar with that service, so I'd have to research it more.
HU
Huey
1 year ago
This looks like a straightforward question about setting up logging and monitoring for AWS WAF. I think option A is the best solution as it has the least operational overhead - just create a CloudWatch Logs log group and configure the WAF web ACL to send logs there. The operations team can then create metric filters to analyze the logs.
IR
Irving
2 years ago
Option A all the way! It's the most cost-effective and easy to implement. No need to spin up a whole OpenSearch cluster or deal with the hassle of Athena.
JO
Joanne
2 years ago
True, but sending logs directly to CloudWatch Logs in option A seems simpler.
LA
Lacresha
2 years ago
Haha, I bet the operations team is thrilled to write SQL queries and set up Athena just to analyze some WAF logs. Why make things more complicated than they need to be?
BR
Brande
2 years ago
C: Definitely. The operations team will appreciate the simplicity of Option A for analyzing the AWS WAF logs.
PH
Phuong
2 years ago
B: Yeah, I agree. Setting up CloudWatch Logs and metric filters is much simpler than using Athena and writing SQL queries.
DU
Dulce
2 years ago
A: Option A seems like the best choice. It's straightforward and doesn't involve setting up additional services.
LA
Lanie
2 years ago
The CloudWatch Logs option seems the most efficient and reliable. I like how it allows the operations team to create custom alarms and alerts without additional overhead.
JO
Jolanda
2 years ago
D: Option A it is then. It provides real-time monitoring and analysis with CloudWatch Logs.
FL
Floyd
2 years ago
C: Option A is definitely the way to go. It simplifies the process for the operations team.
MA
Mari
2 years ago
B: I agree, Option A is the most efficient and least operational overhead.
LA
Lashawn
2 years ago
A: Option A seems like the best choice. It allows the operations team to easily create alarms for specific log patterns.
LU
Luann
2 years ago
But option D also uses CloudWatch for analysis, it could be a good alternative.
CA
Cassie
2 years ago
This is the easiest and most straightforward solution. No need to set up additional services like OpenSearch or Athena. Just send the logs to CloudWatch and use the built-in metric filters.
CH
Christene
2 years ago
B: I agree, setting up CloudWatch Logs with AWS WAF is the least complicated solution.
BI
Billye
2 years ago
A: Option A is definitely the way to go. It's simple and efficient.
SH
Shelton
2 years ago
I agree with Joanne, sending logs to CloudWatch Logs seems efficient.
JO
Joanne
2 years ago
I think option A is the best choice.