nerdexam
Amazon

ANS-C01 · Question #54

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin in an Amazon CloudFront distribution. The company wants to implement a…

The correct answer is C. Use an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/edge-functions.html

Submitted by olafpl· Mar 6, 2026

Question

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin in an Amazon CloudFront distribution. The company wants to implement a custom authentication system that will provide a token for its authenticated customers. The web application must ensure that the GET/POST requests come from authenticated customers before it delivers the content. A network engineer must design a solution that gives the web application the ability to identify authorized customers. What is the MOST operationally efficient solution that meets these requirements?

Options

  • AUse the ALB to inspect the authorized token inside the GET/POST request payload. Use an AWS
  • BIntegrate AWS WAF with the ALB to inspect the authorized token inside the GET/POST request
  • CUse an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST
  • DSet up an EC2 instance that has a third-party packet inspection tool to inspect the authorized

How the community answered

(51 responses)
  • A
    22% (11)
  • B
    10% (5)
  • C
    63% (32)
  • D
    6% (3)

Explanation

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/edge-functions.html

Topics

#CloudFront#Lambda@Edge#Token Validation#Custom Authentication

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice