Weekend Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ac4s65

A company is developing a new application that is deployed in multiple VPCs across multiple...

Amazon Web Services ANS-C01 Full Course Access
Amazon Web Services ANS-C01 View All Questions

A company is developing a new application that is deployed in multiple VPCs across multiple AWS Regions. The VPCs are connected through AWS Transit Gateway. The VPCs contain private subnets and public subnets.

All outbound internet traffic in the private subnets must be audited and logged. The company's network engineer plans to use AWS Network Firewall and must ensure that all traffic through Network Firewall is completely logged for auditing and alerting.

How should the network engineer configure Network Firewall logging to meet these requirements?

A.

Configure Network Firewall logging in Amazon CloudWatch to capture all alerts. Send the logs to a log group in Amazon CloudWatch Logs.

B.

Configure Network Firewall logging in Network Firewall to capture all alerts and flow logs.

C.

Configure Network Firewall logging by configuring VPC Flow Logs for the firewall endpoint. Send the logs to a log group in Amazon CloudWatch Logs.

D.

Configure Network Firewall logging by configuring AWS CloudTrail to capture data events.

ANS-C01 PDF/Engine
  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions
buy now ANS-C01 pdf
Get 65% Discount on All Products, Use Coupon: "ac4s65"
Next
A company operates its IT services through a multi-site hybrid infrastructure.
A company has deployed a software-defined WAN (SD-WAN) solution to interconnect all of its offices.
Previous