Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 168 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 168
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CloudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies.

Which solution will meet these requirements MOST cost-effectively?

A. Create an AWS WAF web ACL with an IP match condition to deny the countries' IP ranges. Associate the web ACL with the CloudFront distribution.
B. Create an AWS WAF web ACL with a geo match condition to deny the specific countries. Associate the web ACL with the CloudFront distribution.
C. Use the geo restriction feature in CloudFront to deny the specific countries.
D. Use geolocation headers in CloudFront to deny the specific countries.

Show Suggested Answer

Suggested Answer: C 🗳️

by grekh001 at May 31, 2024, 8:14 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

toshimizu

1 year ago

Selected Answer: C

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html

upvoted 1 times

...

grekh001

1 year, 1 month ago

C. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html

upvoted 2 times

...