ANS-C01 · Question #224
ANS-C01 Question #224: Real Exam Question with Answer & Explanation
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #224. The question stem and answer options stay visible for context.
Question
A company is using an Amazon CloudFront distribution that is configured with an Application Load Balancer (ALB) as an origin. A network engineer needs to implement a solution that requires all inbound traffic to the ALB to come from CloudFront. The network engineer must implement the solution at the network layer rather than in the application. Which solution will meet these requirements in the MOST operationally efficient way?
Options
- AAdd an inbound rule to the ALB's security group to allow the AWS managed prefix list for
- BAdd an inbound rule to the network ACLs that are associated with the ALB's subnets. Use the
- CConfigure CloudFront to add a custom HTTP header to the requests that CloudFront sends to the
- DAssociate an AWS WAF web ACL with the ALB. Configure the AWS WAF rules to allow traffic
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.