nerdexam
Amazon

DVA-C02 · Question #369

A developer is writing a web application that is deployed on Amazon EC2 instances behind an internet-facing Application Load Balancer (ALB). The developer must add an Amazon CloudFront distribution in

The correct answer is B. Set the Origin Protocol Policy setting to Match Viewer. E. Set the Viewer Protocol Policy setting to Redirect HTTP to HTTPS.. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-cloudfront- to-custom-origin.html

Submitted by dimitri_ru· Mar 5, 2026Security

Question

A developer is writing a web application that is deployed on Amazon EC2 instances behind an internet-facing Application Load Balancer (ALB). The developer must add an Amazon CloudFront distribution in front of the ALB. The developer also must ensure that customer data from outside the VPC is encrypted in transit. Which combination of CloudFront configuration settings should the developer use to meet these requirements? (Choose two.)

Options

  • ARestrict viewer access by using signed URLs.
  • BSet the Origin Protocol Policy setting to Match Viewer.
  • CEnable field-level encryption.
  • DEnable automatic object compression.
  • ESet the Viewer Protocol Policy setting to Redirect HTTP to HTTPS.

How the community answered

(42 responses)
  • A
    10% (4)
  • B
    83% (35)
  • C
    2% (1)
  • D
    5% (2)

Explanation

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-cloudfront- to-custom-origin.html

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DVA-C02 Practice