A company has deployed an AWS Network Firewall ¦rewall into a VPC. A network engineer needs to implement a sol

Question

A company has deployed an AWS Network Firewall ¦rewall into a VPC. A network engineer needs to implement a solution to deliver Network
Firewall §ow logs to the company’s Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster in the shortest possible time.
Which solution will meet these requirements?

Accepted Answer

B. Create an Amazon Kinesis Data Firehose delivery stream that includes the Amazon OpenSearch Service (Amazon Elasticsearch Service) Cluster as the destination. Con¦gure §ow logs for the ¦rewall Set the Kinesis Data Firehose delivery stream as the destination for the Network Firewall §ow logs.

Answer

A. Create an Amazon S3 bucket. Create an AWS Lambda function to load logs into the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster. Enable Amazon Simple Noti¦cation Service (Amazon SNS) noti¦cations on the S3 bucket to invoke the Lambda function. Con¦gure §ow logs for the ¦rewall. Set the S3 bucket as the destination.

Answer

C. Con¦gure §ow logs for the ¦rewall. Set the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as the destination for the Network Firewall §ow logs.

Answer

D. Create an Amazon Kinesis data stream that includes the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as the Destination. Con¦gure §ow logs for the ¦rewall. Set the Kinesis data stream as the destination for the Network Firewall §ow logs.

Q51 — AWS ANS-C01 Ch.1

Explanation