Examtopics

AWS Certified Security - Specialty

  • Topic 1 Question 168

    A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CloudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies.

    Which solution will meet these requirements MOST cost-effectively?

    • Create an AWS WAF web ACL with an IP match condition to deny the countries' IP ranges. Associate the web ACL with the CloudFront distribution.

    • Create an AWS WAF web ACL with a geo match condition to deny the specific countries. Associate the web ACL with the CloudFront distribution.

    • Use the geo restriction feature in CloudFront to deny the specific countries.

    • Use geolocation headers in CloudFront to deny the specific countries.

    シャッフルモード