Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 64 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01

Question #: 64
Topic #: 1

[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin in an Amazon CloudFront distribution. The company wants to implement a custom authentication system that will provide a token for its authenticated customers.
The web application must ensure that the GET/POST requests come from authenticated customers before it delivers the content. A network engineer must design a solution that gives the web application the ability to identify authorized customers.
What is the MOST operationally efficient solution that meets these requirements?

A. Use the ALB to inspect the authorized token inside the GET/POST request payload. Use an AWS Lambda function to insert a customized header to inform the web application of an authenticated customer request.
B. Integrate AWS WAF with the ALB to inspect the authorized token inside the GET/POST request payload. Configure the ALB listener to insert a customized header to inform the web application of an authenticated customer request.
C. Use an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST request payload. Use the Lambda@Edge function also to insert a customized header to inform the web application of an authenticated customer request.
D. Set up an EC2 instance that has a third-party packet inspection tool to inspect the authorized token inside the GET/POST request payload. Configure the tool to insert a customized header to inform the web application of an authenticated customer request.

Show Suggested Answer

Suggested Answer: C 🗳️

by zaazanuna at March 19, 2023, 5:14 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

titi_r

Highly Voted 2 years, 4 months ago

Selected Answer: C

C) is correct. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/edge-functions.html

upvoted 8 times

...

woorkim

Most Recent 10 months ago

only c is correct! Use when you need some of the capabilities of Lambda@Edge that aren’t available with CloudFront Functions (e.g., longer execution time, network access, …)

upvoted 1 times

...

Raphaello

1 year, 4 months ago

Selected Answer: C

C it the correct answer. Lambda@Edge (after viewer request/before origin request) can inspect cookies/authentication token, and perform function logic and redirection (to login page when needed).

upvoted 2 times

...

marfee

1 year, 6 months ago

I think that It's correct answer is C.

upvoted 1 times

...

Arad

1 year, 9 months ago

Selected Answer: C

C is correct answer.

upvoted 1 times

...

Mishranihal737

2 years ago

Yes c is correct

upvoted 1 times

...

bala2021

2 years, 3 months ago

CUse an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST request payload. Use the Lambda@Edge function also to insert a customized header to inform the web application of an authenticated customer request. C : Ans

upvoted 2 times

...