Amazon Exam SCS-C01 Topic 1 Question 24 Discussion

Actual exam question for Amazon's SCS-C01 exam

Question #: 24
Topic #: 1

A business stores website images in an Amazon S3 bucket. The firm serves the photos to end users through Amazon CloudFront. The firm learned lately that the photographs are being accessible from nations in which it does not have a distribution license.

Which steps should the business take to safeguard the photographs and restrict their distribution? (Select two.)

AUpdate the S3 bucket policy to restrict access to a CloudFront origin access identity (OAI).

BUpdate the website DNS record to use an Amazon Route 53 geolocation record deny list of countries where the company lacks a license.

CAdd a CloudFront geo restriction deny list of countries where the company lacks a license.

DUpdate the S3 bucket policy with a deny list of countries where the company lacks a license.

EEnable the Restrict Viewer Access option in CloudFront to create a deny list of countries where the company lacks a license.

Show Suggested Answer

Suggested Answer: A, C

For Enable Geo-Restriction, choose Yes. For Restriction Type, choose Whitelist to allow access to certain countries, or choose Blacklist to block access from certain countries. https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-geo-restriction/

by Lezlie at May 06, 2022, 11:00 AM

Limited Time Offer

25%

Off

Get Premium SCS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!