DOP-C02 · Question #457
DOP-C02 Question #457: Real Exam Question with Answer & Explanation
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #457. The question stem and answer options stay visible for context.
Question
A company deployed an Amazon CloudFront distribution that accepts requests and routes to an Amazon API Gateway HTTP API. During a recent security audit, the company discovered that requests from the internet could reach the HTTP API without using the CloudFront distribution. A DevOps engineer must ensure that connections to the HTTP API use the CloudFront distribution. Which solution will meet these requirements?
Options
- AEnable VPC Flow Logs to identify requests that reach the HTTP API.
- BDeploy AWS WAF in front of the CloudFront distribution.
- CImplement an identity-based policy on the CloudFront distribution that requires authentication to
- DImplement a custom header in the CloudFront distribution. Implement an AWS Lambda authorizer
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.